Skip to content
OpenAdvisories
High WID-SEC-2023-0663 2 CVEs

PHPMailer: Mehrere Schwachstellen ermöglichen Codeausführung

Published Jun 17, 2021 · Updated Mar 15, 2023 · Revision 2 · de-DE

Vendor: Ubuntu Product: Linux Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PHPMailer ausnutzen, um beliebigen Programmcode auszuführen.

Product

PHPMailer ist eine PHP-Bibliothek zum Versenden von E-Mails.

Vulnerabilities 2

  • High 8.1
    CVE-2021-34551

    Remote Code Execution vulnerability in PHPMailer 6.4.1 running on Windows

    PHPMailer before 6.5.0 on Windows allows remote code execution if lang_path is untrusted data and has a UNC pathname.

    phpmailer/phpmailer Packagist
  • High 8.1
    CVE-2021-3603

    Inclusion of Functionality from Untrusted Control Sphere in PHPMailer/PHPMailer

    PHPMailer 6.4.1 and earlier contain a vulnerability that can result in untrusted code being called (if such code is injected into the host project's scope by other means). If the $patternselect parameter to validateAddress() is set to 'php' (the default, defi…

    PHPMailer PHPMailer phpmailer/phpmailer libphp-phpmailer Debian Ubuntu Packagist

Revision history

  1. #2

    Neue Updates von Ubuntu aufgenommen

  2. #1

    Initiale Fassung

References