VDB

GCVE-VVD-MAGEIA-2017-322

GCVE-VVD-MAGEIA-2017-322
Advisory Published
Vulnetix · Advisory published September 1, 2017
In apache-commons-email before 1.5, when a call-site passes a subject for an email that contains line-breaks, the caller can add arbitrary SMTP headers (CVE-2017-9801).

Affected Products

VendorProductVersionsPlatforms
Mageiaapache-commons-email0 (affected), 1.3.1-4.1.mga5 (unaffected)—
Mageiaapache-commons-email0 (affected), 1.3.1-10.1.mga6 (unaffected)—

Browse GCVE Records

20,133 records in the GCVE database · Updated October 22, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›