Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache James

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2022-22931 Public exploit

    Path traversal in Apache James 3.6.1

    Fix of CVE-2021-40525 do not prepend delimiters upon valid directory validations. Affected implementations include: - maildir mailbox store - Sieve file repository This enables a user to access other users data stores (limited to user names being prefixed by …

    Apache Software Foundation Apache James org.apache.james:james-server Maven