{"action":"Upgrade zendframework/zend-mail to 2.4.11 or later.","affected":[{"fixed":"2.4.11","introduced":"0"},{"introduced":"2.5","last_affected":"2.5.2"},{"introduced":"2.6","last_affected":"2.6.2"},{"fixed":"2.7.2","introduced":"2.7"}],"component":"zendframework/zend-mail","cve_ids":["CVE-2016-10034"],"ecosystem":"Packagist","epss":0.38438,"exploited":false,"fixed_versions":["2.4.11","2.7.2"],"ghsa_id":"GHSA-r9mw-gwx9-v3h5","id":"tcs_01M5KF83Z027REB62DB0BZMMST","modified_at":"2024-04-23T23:26:47.206953Z","published_at":"2022-05-14T02:19:49Z","references":["https://osv.dev/vulnerability/GHSA-r9mw-gwx9-v3h5","https://nvd.nist.gov/vuln/detail/CVE-2016-10034","https://framework.zend.com/security/advisory/ZF2016-04","https://github.com/zendframework/zend-mail","https://legalhackers.com/advisories/ZendFramework-Exploit-ZendMail-Remote-Code-Exec-CVE-2016-10034-Vuln.html","https://security.gentoo.org/glsa/201804-10","https://www.exploit-db.com/exploits/40979","https://www.exploit-db.com/exploits/40986","https://www.exploit-db.com/exploits/42221","http://www.securityfocus.com/bid/95144","http://www.securitytracker.com/id/1037539"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-r9mw-gwx9-v3h5","url":"https://osv.dev/vulnerability/GHSA-r9mw-gwx9-v3h5"}],"summary":"zend-mail remote code execution via Sendmail adapter"}