CVE-2015-8476

Packagist/phpmailer/phpmailer CVE-2015-8476: low

SMTP Injection in PHPMailer

Action: Upgrade phpmailer/phpmailer to 5.2.14 or later.

composer require phpmailer/phpmailer:5.2.14

Affected

Fixed versions

Sources

• osv: GHSA-738m-f33v-qc2r
• https://github.com/PHPMailer/PHPMailer/security/advisories/GHSA-738m-f33v-qc2r
• https://nvd.nist.gov/vuln/detail/CVE-2015-8476
• https://github.com/PHPMailer/PHPMailer/commit/6687a96a18b8f12148881e4ddde795ae477284b0
• https://github.com/FriendsOfPHP/security-advisories/blob/master/phpmailer/phpmailer/CVE-2015-8476.yaml
• https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.14
• http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177130.html
• http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177139.html
• http://www.debian.org/security/2015/dsa-3416
• http://www.openwall.com/lists/oss-security/2015/12/04/5
• http://www.openwall.com/lists/oss-security/2015/12/05/1
• http://www.securityfocus.com/bid/78619

CVE-2015-8476 · published 2020-03-05T22:09:19Z · modified 2024-12-02T05:46:41.550604Z · JSON