Summary
Elar Lang discovered that PHPMailer did not properly escape double quote
characters in filenames. A remote attacker could possibly exploit this
with a crafted filename to bypass attachment filters that are based on
matching filename extensions. (CVE-2020-13625)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | libphp-phpmailer | 5.2.14+dfsg-2.3+deb9u2build0.18.04.1 |
Vulnerabilities 1
-
High 7.5
Insufficient output escaping of attachment names in PHPMailer
PHPMailer before 6.1.6 contains an output escaping bug when the name of a file attachment contains a double quote character. This can result in the file type being misinterpreted by the receiver or any mail relay processing the message.
References
-
report
https://ubuntu.com/security/CVE-2020-13625