Summary
Dawid Golunski discovered that Swift Mailer did not properly sanitize
e-mail addresses in the mail transport. A remote attacker could possibly
use this issue to pass extra parameters to the mail command and execute
arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | libphp-swiftmailer | 5.4.1-1ubuntu1+esm1 |
Vulnerabilities 1
-
Critical 9.8
Swift Mailer mail transport Command Injection
The mail transport (aka Swift_Transport_MailTransport) in Swift Mailer before 5.4.5 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted e-mail address…
References
-
report
https://ubuntu.com/security/CVE-2016-10074