Skip to content
OpenAdvisories
Medium DLA-817-1 1 CVE

libphp-phpmailer - security update

Published Feb 6, 2017 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 libphp-phpmailer 5.1-1.3+deb7u1

Vulnerabilities 1

  • Medium 5.5
    CVE-2017-5223 Public exploit

    Local file disclosure in PHPMailer

    An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML document to make it usable as an email message body. One of the transformations is to convert relative image URLs into attachments using a script…