PT-2021-3321 · Phpmailer · Phpmailer

Published 2021-06-16 · Updated 2024-03-06 · CVE-2021-34551

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PHPMailer versions prior to 6.5.0

Description The issue is related to errors in handling the lang path parameter in the setLanguage() function of the PHPMailer library. This can allow a remote attacker to execute arbitrary code if the lang path is untrusted data and contains a UNC pathname.

Recommendations For PHPMailer versions prior to 6.5.0, update to version 6.5.0 or later to resolve the issue. As a temporary workaround, consider validating and sanitizing the lang path parameter to prevent the use of untrusted data, especially those containing UNC pathnames. Restrict access to the setLanguage() function to minimize the risk of exploitation.

Exploit

Fix

RCE

Unrestricted File Upload

Code Injection

Weakness Enumeration

CWE-20

CWE-434

CWE-94

Related Identifiers

BDU:2021-03114

BIT-PHPMAILER-2021-34551

CVE-2021-34551

GHSA-7Q44-R25X-WM4Q

Affected Products

Phpmailer

References · 16

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/phpmailer/phpmailer/CVE-2021-34551.yaml · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-34551 · Security Note
• https://osv.dev/vulnerability/BIT-phpmailer-2021-34551 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YRMWGA4VTMXFB22KICMB7YMFZNFV3EJ · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/FJYSOFCUBS67J3TKR74SD3C454N7VTYM · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-03114 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FJYSOFCUBS67J3TKR74SD3C454N7VTYM · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/3YRMWGA4VTMXFB22KICMB7YMFZNFV3EJ · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-7q44-r25x-wm4q · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-34551 · Vendor Advisory
• https://github.com/PHPMailer/PHPMailer/blob/master/SECURITY.md · Note
• https://github.com/PHPMailer/PHPMailer/releases/tag/v6.5.0 · Note
• https://github.com/PHPMailer/PHPMailer/commit/acd264bf17ff4ac5c915f0d4226dce8a9ea70bc3 · Note
• https://github.com/PHPMailer/PHPMailer/security/advisories/GHSA-7q44-r25x-wm4q · Note
• https://cybersecurity-help.cz/vdb/SB2021061620 · Note