Packagist/phpmailer/phpmailer CVE-2021-34551: high 8.1, EPSS 2.80%

Remote Code Execution vulnerability in PHPMailer 6.4.1 running on Windows

Action: Upgrade phpmailer/phpmailer to 6.5.0 or later.

composer require phpmailer/phpmailer:6.5.0

Affected

Fixed versions

Sources

• osv: GHSA-7q44-r25x-wm4q
• https://github.com/PHPMailer/PHPMailer/security/advisories/GHSA-7q44-r25x-wm4q
• https://nvd.nist.gov/vuln/detail/CVE-2021-34551
• https://github.com/PHPMailer/PHPMailer/commit/acd264bf17ff4ac5c915f0d4226dce8a9ea70bc3
• https://github.com/FriendsOfPHP/security-advisories/blob/master/phpmailer/phpmailer/CVE-2021-34551.yaml
• https://github.com/PHPMailer/PHPMailer/blob/master/SECURITY.md
• https://github.com/PHPMailer/PHPMailer/releases/tag/v6.5.0
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YRMWGA4VTMXFB22KICMB7YMFZNFV3EJ
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FJYSOFCUBS67J3TKR74SD3C454N7VTYM

CVE-2021-34551 · published 2021-06-22T15:17:51Z · modified 2024-02-17T05:31:56.638886Z · JSON