PT-2018-2631 · Php+2 · Phpmailer+2
Carnil
+1
·
Publicado
2018-11-16
·
Atualizado
2023-03-15
·
CVE-2018-19296
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
PHPMailer versions prior to 5.2.27
PHPMailer versions 6.x prior to 6.0.6
Description
The issue is related to insufficient input validation in the PHPMailer library, allowing a remote attacker to perform an object injection attack. This could potentially lead to remote code execution. The vulnerability can be exploited by passing
phar:// paths into functions like addAttachment(), which may receive unfiltered local paths. It is reported that the estimated number of potentially affected devices is not provided.Recommendations
For PHPMailer versions prior to 5.2.27, update to version 5.2.27 or later.
For PHPMailer versions 6.x prior to 6.0.6, update to version 6.0.6 or later.
As a temporary workaround, consider validating and sanitizing user input before using it, and block the use of paths containing URL-protocol style prefixes such as
phar://.Exploit
Correção
Deserialization of Untrusted Data
Prototype Pollution
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Linuxmint
Phpmailer
Ubuntu