High DLA-2244-1 1 CVE

libphp-phpmailer - security update

Published Jun 11, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	libphp-phpmailer	5.2.9+dfsg-2+deb8u6

Vulnerabilities 1

High 7.5

CVE-2020-13625

Insufficient output escaping of attachment names in PHPMailer

PHPMailer before 6.1.6 contains an output escaping bug when the name of a file attachment contains a double quote character. This can result in the file type being misinterpreted by the receiver or any mail relay processing the message.

cacti phpmailer/phpmailer libphp-phpmailer libphp-phpmailer Debian Ubuntu Alpine Packagist

Jun 8, 2020