PT-2024-40258 · Monolog · Monolog

Published 2024-05-15 · Updated 2024-05-15

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions: Monolog library (affected versions not specified)

Description: A header injection issue has been identified in the NativeMailerHandler of the Monolog library, potentially allowing an attacker to manipulate email headers when log messages are sent via email.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

GHSA-F57V-Q966-7FH6

Affected Products

Monolog

References · 6

• https://osv.dev/vulnerability/GHSA-f57v-q966-7fh6 · Vendor Advisory
• https://github.com/Seldaek/monolog · Note
• https://github.com/Seldaek/monolog/pull/448#issuecomment-68208704 · Note
• https://github.com/Seldaek/monolog/commit/515a096c864b00b3967f7f601680f85d4a2e4001 · Note
• https://github.com/Seldaek/monolog/issues/458 · Note
• https://github.com/FriendsOfPHP/security-advisories/blob/master/monolog/monolog/2014-12-29-1.yaml · Note