CVE-2024-45626
Last modified
CVE-2024-45626 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Apache James server JMAP HTML to text plain implementation in versions below 3.8.2 and 3.7.6 is subject to unbounded memory consumption that can result in a denial of service. Users are recommended to upgrade to version 3.7.6 and 3.8.2, which fix this issue.. EPSS estimates a 0.74% chance of exploitation in the next 30 days.
Description
Apache James server JMAP HTML to text plain implementation in versions below 3.8.2 and 3.7.6 is subject to unbounded memory consumption that can result in a denial of service. Users are recommended to upgrade to version 3.7.6 and 3.8.2, which fix this issue.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apache | James Server | < 3.7.6 |
| Apache | James Server | >= 3.8.0, < 3.8.2 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-45626?
How severe is CVE-2024-45626?
How do I fix CVE-2024-45626?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-45620A vulnerability was found in the pkcs15-init tool in OpenSC.…3.9
- CVE-2024-45621The Electron desktop application of Rocket.Chat through 6.3.…5.4
- CVE-2024-45622ASIS (aka Aplikasi Sistem Sekolah using CodeIgniter 3) 3.0.0…9.8
- CVE-2024-45623D-Link DAP-2310 Hardware A Firmware 1.16RC028 allows remote …9.8
- CVE-2024-45624Exposure of sensitive information due to incompatible polici…7.5
- CVE-2024-45625Cross-site scripting vulnerability exists in Forminator vers…6.1
- CVE-2024-45627In Apache Linkis <1.7.0, due to the lack of effective filter…5.9
- CVE-2024-4563The Progress MOVEit Automation configuration export function…7.5
- CVE-2024-45636IBM Security QRadar EDR 3.12 through 3.12.24 stores user cre…4.4
- CVE-2024-45638IBM Security QRadar 3.12 EDR stores user credentials in plai…4.4
- CVE-2024-4564The CoDesigner WooCommerce Builder for Elementor – Customize…6.4
- CVE-2024-45640IBM Security ReaQta 3.12 returns sensitive information in an…5.3
Are you affected by CVE-2024-45626?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST