Access Control Bypass

2020-05-2801:26:56

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.009 Low

EPSS

Percentile

82.8%

JSON

phpmailer/phpmailer is vulnerable to access control bypass. The vulnerability exists as the values of name in Content-Type, and filename in Content-Disposition were not sanitized, allowing values ending with ;.jpg to trick mail filters to accept attachments with .jpg extensions.

CPENameOperatorVersion
phpmailer/phpmailerle6.1.5
libphp-phpmailer:bioniceq5.2.14+dfsg
libphp-phpmailer:stretcheq5.2.14+dfsg-2.3+deb9u1
cacti:edgeeq1.2.10-r0
cacti:edgeeq1.2.12-r0
cacti:edgeeq1.2.10-r1
cacti:edgeeq1.2.11-r0
phpmailer/phpmailerle6.1.5
libphp-phpmailer:bioniceq5.2.14+dfsg
libphp-phpmailer:stretcheq5.2.14+dfsg-2.3+deb9u1

Name	Operator	Version
phpmailer/phpmailer	le	6.1.5
libphp-phpmailer:bionic	eq	5.2.14+dfsg
libphp-phpmailer:stretch	eq	5.2.14+dfsg-2.3+deb9u1
cacti:edge	eq	1.2.10-r0
cacti:edge	eq	1.2.12-r0
cacti:edge	eq	1.2.10-r1
cacti:edge	eq	1.2.11-r0
phpmailer/phpmailer	le	6.1.5
libphp-phpmailer:bionic	eq	5.2.14+dfsg
libphp-phpmailer:stretch	eq	5.2.14+dfsg-2.3+deb9u1