PT-2017-19452 · Mageia · Php-Phpmailer

Publicado 2017-12-01 · Atualizado 2017-12-01

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned.

Description The issue arises from the debug output not being set in the constructor according to the SAPI in use, resulting in a potential XSS in the default debug output.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2017-0438

Produtos afetados

Php-Phpmailer

Referências · 4

• https://advisories.mageia.org/MGASA-2017-0438.html · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2017-0438 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/PJ56RXWJ42PXFZPVRGEDSP4HAE3TNRV6 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=22051 · Nota