Jakarta Mail SMTP Injection Vulnerability

A SMTP injection vulnerability has been identified in Jakarta Mail version 2.2. This issue arises from the improper handling of UTF-8 characters, specifically the carriage return and newline, which can be used to manipulate the separation of messages in the SMTP protocol.

Impact

Exploitation of this vulnerability allows for SMTP injection, where an attacker can manipulate email headers or content by injecting malicious data into the SMTP message stream.