Lucene search
Veracode Vulnerability DatabaseVERACODE:47280HistoryMay 31, 2024 - 4:46 a.m.
Command Injection
2024-05-3104:46:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
command injection
swiftmailer
improper handling
from header
return-path
arbitrary shell commands
7.8 High
AI Score
Confidence
High
swiftmailer/swiftmailer is vulnerable to Command Injection. The vulnerability is due to improper handling of the “From” header when it comes from a non-trusted source and when no “Return-Path” is configured, which allows an attacker to execute arbitrary shell commands.
7.8 High
AI Score
Confidence
High