Product
Apache James versions prior to 3.9.1 are vulnerable to a path traversal flaw in the SieveFileRepository, allowing authenticated attackers to inject malicious SIEVE scripts into other users accounts.