Non notée
CVE-2021-40525 Apache James ManagedSieve implementation alongside with the file storage for sieve scripts is vulnerable to path…
Description
Apache James ManagedSieve implementation alongside with the file storage for sieve scripts is vulnerable to path traversal, allowing reading and writing any file. This vulnerability had been patched in Apache James 3.6.1 and higher. We recommend the upgrade. Distributed and Cassandra based products are also not impacted.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache James 3.6 | premières → 3.6.0 | Pas de correctif indiqué |
Autres CVE de Apache James
Les 13 CVE de Apache James →
CVE-2026-85111
Apache James: Denial of service upon MIME parsing
8.7
Élevée
CVE-2026-76168
Apache James: ManageSieve file implementation cross-user path traversal
Non notée
CVE-2026-74756
Apache James: WebAdmin exposed without authentication on official Docker default
Non notée
CVE-2026-76171
Apache James: SSRF filter bypass in the JMAP PushSubscription web-push client
Non notée