PHPMailer before 5.2.27 and 6.x before 6.0.6 is vulnerable to an object injection attack.
References
Link | Resource |
---|---|
https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.27 | Release Notes Vendor Advisory |
https://github.com/PHPMailer/PHPMailer/releases/tag/v6.0.6 | Release Notes Vendor Advisory |
https://lists.debian.org/debian-lts-announce/2018/12/msg00020.html | Mailing List Third Party Advisory |
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3B5WDPGUFNPG4NAZ6G4BZX43BKLAVA5B/ | |
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KPU66INRFY5BQ3ESVPRUXJR4DXQAFJVT/ | |
https://www.debian.org/security/2018/dsa-4351 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
07 Nov 2023, 02:55
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
02 Dec 2022, 19:21
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-1321 |
18 May 2021, 19:19
Type | Values Removed | Values Added |
---|---|---|
References | (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KPU66INRFY5BQ3ESVPRUXJR4DXQAFJVT/ - Third Party Advisory | |
References | (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3B5WDPGUFNPG4NAZ6G4BZX43BKLAVA5B/ - Third Party Advisory | |
CPE | cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:* cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:* |
12 May 2021, 18:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
12 May 2021, 08:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
Information
Published : 2018-11-16 09:29
Updated : 2023-12-10 12:44
NVD link : CVE-2018-19296
Mitre link : CVE-2018-19296
CVE.ORG link : CVE-2018-19296
JSON object : View
Products Affected
debian
- debian_linux
wordpress
- wordpress
phpmailer_project
- phpmailer
fedoraproject
- fedora