6.0
Medium
CVE-2025-7962 In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8…
Description
In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jakarta Mail 2.0 | earliest → < 2.0.2 | 2.0.2 |
| Jakarta Mail 1.6 | earliest → < 1.6.8 | 1.6.8 |