dotCMS versions prior to 3.5 and 3.3.2 suffers from an email header injection vulnerability. Continue reading...