Lucene search

PHPMailer untrusted code may be run from an overridden address validator

🗓️ 22 Jun 2021 15:02:18Reported by GitHub Advisory DatabaseType

PHPMailer untrusted code validator override issue patched in version 6.5.

Reporter	Title	Published	Views	Family All 31
NVD	CVE-2021-3603	17 Jun 202112:15	–	nvd
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2021-3603	5 Mar 202500:00	–	nessus
Tenable Nessus	FreeBSD : mantis -- multiple vulnerabilities (9b1699ff-d84c-11eb-92d6-1b6ff3dfe4d3)	12 Jul 202100:00	–	nessus
Tenable Nessus	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : PHPMailer vulnerabilities (USN-5956-1)	15 Mar 202300:00	–	nessus
OpenVAS	Mageia: Security Advisory (MGASA-2021-0345)	28 Jan 202200:00	–	openvas
OpenVAS	PHPMailer < 6.5.0 RCE Vulnerability	17 Jun 202100:00	–	openvas
OpenVAS	Fedora: Security Advisory for php-phpmailer6 (FEDORA-2021-ef548cb234)	28 Jun 202100:00	–	openvas
OpenVAS	Fedora: Security Advisory for php-phpmailer6 (FEDORA-2021-bfc34b3d5c)	28 Jun 202100:00	–	openvas
OpenVAS	Ubuntu: Security Advisory (USN-5956-1)	16 Mar 202300:00	–	openvas
OpenVAS	Ubuntu: Security Advisory (USN-5956-2)	16 Mar 202300:00	–	openvas

Vulners

Node

phpmailer phpmailerRange<6.5.0

Source	Link
github	www.github.com/PHPMailer/PHPMailer/security/advisories/GHSA-77mr-wc79-m8j3
github	www.github.com/PHPMailer/PHPMailer/commit/45f3c18dc6a2de1cb1bf49b9b249a9ee36a5f7f3
web	www.web.nvd.nist.gov/view/vuln/detail
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-3603
huntr	www.huntr.dev/bounties/1-PHPMailer/PHPMailer/
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/phpmailer/phpmailer/CVE-2021-3603.yaml
github	www.github.com/PHPMailer/PHPMailer/releases/tag/v6.5.0
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YRMWGA4VTMXFB22KICMB7YMFZNFV3EJ/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FJYSOFCUBS67J3TKR74SD3C454N7VTYM/
github	www.github.com/advisories/GHSA-77mr-wc79-m8j3

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 Jun 2021 15:18Current

7.9High risk

Vulners AI Score7.9

CVSS26.8

CVSS38.1

EPSS0.0051