Debian/libphp-phpmailer: unknown
Multiple CRLF injection vulnerabilities in PHPMailer before 5.2.14 allow attackers to inject arbitrary SMTP commands via CRLF sequences in an (1) email address to the validateAddress function in class
Action: Upgrade libphp-phpmailer to 5.2.14+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.2.14+dfsg-1 | - |
Fixed versions
| 5.2.14+dfsg-1 |
Sources
- osv: DEBIAN-CVE-2015-8476#Debian:14/libphp-phpmailer
- https://security-tracker.debian.org/tracker/CVE-2015-8476
published · modified · JSON