High DLA-2306-1 1 CVE

libphp-phpmailer - security update

Published Aug 1, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	libphp-phpmailer	5.2.14+dfsg-2.3+deb9u2

Vulnerabilities 1

High 7.5

CVE-2020-13625

Insufficient output escaping of attachment names in PHPMailer

PHPMailer before 6.1.6 contains an output escaping bug when the name of a file attachment contains a double quote character. This can result in the file type being misinterpreted by the receiver or any mail relay processing the message.

cacti phpmailer/phpmailer libphp-phpmailer libphp-phpmailer Debian Ubuntu Alpine Packagist

Jun 8, 2020