An SMTP Command Injection (CRLF Injection) vulnerability in Netty's SMTP codec allows a remote attacker who can control SMTP command parameters (e.g., an email recipient) to forge arbitrary emails ...
A zero-day flaw in the widely used Netty Java library has been assigned CVE-2025-59419. This vulnerability allows attackers to inject arbitrary SMTP commands into email transmissions, effectively ...
A flaw was found in Netty netty-codec-smtp. The component does not properly validate Carriage Return (CR) and Line Feed (LF) characters in the SMTP command-name field. A remote attacker, if an ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results