Lucene search

K
friendsofphpOpenJS FoundationFRIENDSOFPHP:PHPMAILER:PHPMAILER:CVE-2017-5223
HistoryJan 06, 2016 - 9:35 p.m.

Local File Disclosure

2016-01-0621:35:04
OpenJS Foundation
github.com
2

6.9 Medium

AI Score

Confidence

High

0.951 High

EPSS

Percentile

99.3%

SECURITY Fix CVE-2017-5223, local file disclosure vulnerability if content passed to msgHTML() is sourced from unfiltered user input. Reported by Yongxiang Li of Asiasecurity. The fix for this means that calls to msgHTML() without a $basedir will not import images with relative URLs, and relative URLs containing … will be ignored. Add simple contact form example Emoji in test content

CPENameOperatorVersion
phpmailer/phpmailerlt5.2.22