Monolog Header injection in NativeMailerHandler

2024-05-1523:08:13

CWE-74

GitHub Advisory Database

github.com

monolog

nativemailerhandler

header injection

vulnerability

email manipulation

7.3 High

AI Score

Confidence

Low

JSON

A header injection vulnerability has been identified in the NativeMailerHandler of the Monolog library. This vulnerability may allow an attacker to manipulate email headers when log messages are sent via email.

Affected configurations

Vulners

Node

monologRange<1.12.0

CPENameOperatorVersion
monolog/monologlt1.12.0

CPE	Name	Operator	Version
	monolog/monolog	lt	1.12.0

References

github.com/advisories/GHSA-f57v-q966-7fh6

github.com/FriendsOfPHP/security-advisories/blob/master/monolog/monolog/2014-12-29-1.yaml

github.com/Seldaek/monolog/commit/515a096c864b00b3967f7f601680f85d4a2e4001

github.com/Seldaek/monolog/issues/458

github.com/Seldaek/monolog/pull/448#issuecomment-68208704

7.3 High

AI Score

Confidence

Low

JSON