← Database

CVE-2022-22931

MEDIUM CVSS: 4.3 Published: 2022-02-07 Modified: 2026-06-17

Description

Fix of CVE-2021-40525 do not prepend delimiters upon valid directory validations. Affected implementations include: - maildir mailbox store - Sieve file repository This enables a user to access other users data stores (limited to user names being prefixed by the value of the username being used).

Affected Platforms

Apache James

Weakness Type

CWE-22, CWE-22

References