Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-4505-1
HistorySep 16, 2020 - 12:00 a.m.

PHPMailer vulnerability

2020-09-1600:00:00
ubuntu.com
58
phpmailer
vulnerability
libphp-phpmailer
ubuntu 18.04 esm
remote attacker
filename characters
attachment filters
cve-2020-13625
unix

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.7

Confidence

High

EPSS

0.009

Percentile

82.8%

JSON

Releases

  • Ubuntu 18.04 ESM

Packages

  • libphp-phpmailer - full featured email transfer class for PHP

Details

Elar Lang discovered that PHPMailer did not properly escape double quote
characters in filenames. A remote attacker could possibly exploit this
with a crafted filename to bypass attachment filters that are based on
matching filename extensions. (CVE-2020-13625)

OSVersionArchitecturePackageVersionFilename
Ubuntu18.04noarchlibphp-phpmailer< 5.2.14+dfsg-2.3+deb9u2build0.18.04.1UNKNOWN

Related

openvas 16
cvelist 1
cve 1
veracode 1
osv 9
nessus 10
fedora 6
github 1
alpinelinux 1
debian 2
debiancve 1
prion 1
nvd 1
mageia 1
ubuntucve 1
suse 2
freebsd 1
ubuntu 2
openvas
openvas
Fedora: Security Advisory for php-phpmailer6 (FEDORA-2020-d67df93aa6)
2020-06-08 00:00:00
PHPMailer < 6.1.6 Output Escaping Vulnerability
2020-06-15 00:00:00
Fedora: Security Advisory for php-phpmailer6 (FEDORA-2020-6d2e1105f2)
2020-06-08 00:00:00
cvelist
cvelist
CVE-2020-13625
2020-06-08 16:03:22
cve
cve
CVE-2020-13625
2020-06-08 17:15:10
veracode
veracode
Access Control Bypass
2020-05-28 01:26:56
osv
osv
BIT-phpmailer-2020-13625
2024-03-06 11:02:00
CVE-2020-13625
2020-06-08 17:15:10
libphp-phpmailer vulnerability
2020-09-16 15:25:17
nessus
nessus
Fedora 32 : php-PHPMailer (2020-06e87e71fe)
2020-07-01 00:00:00
Debian DLA-2244-1 : libphp-phpmailer security update
2020-06-12 00:00:00
Fedora 32 : php-phpmailer6 (2020-d67df93aa6)
2020-06-08 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: php-phpmailer6-6.1.6-2.fc32
2020-06-07 19:49:11
[SECURITY] Fedora 31 Update: php-phpmailer6-6.1.6-1.fc31
2020-06-07 19:47:31
[SECURITY] Fedora 32 Update: php-PHPMailer-5.2.28-2.fc32
2020-07-01 01:51:24
github
github
Insufficient output escaping of attachment names in PHPMailer
2020-05-27 16:37:02
alpinelinux
alpinelinux
CVE-2020-13625
2020-06-08 17:15:10
debian
debian
[SECURITY] [DLA 2306-1] libphp-phpmailer security update
2020-08-02 04:39:28
[SECURITY] [DLA 2244-1] libphp-phpmailer security update
2020-06-11 14:27:34
debiancve
debiancve
CVE-2020-13625
2020-06-08 17:15:10
prion
prion
Double free
2020-06-08 17:15:00
nvd
nvd
CVE-2020-13625
2020-06-08 17:15:10
mageia
mageia
Updated php-phpmailer packages fix security vulnerability
2020-08-01 12:25:19
ubuntucve
ubuntucve
CVE-2020-13625
2020-06-08 00:00:00
suse
suse
Security update for cacti, cacti-spine (moderate)
2020-07-28 00:00:00
Security update for cacti, cacti-spine (moderate)
2020-07-25 00:00:00
freebsd
freebsd
Cacti -- multiple vulnerabilities
2020-07-15 00:00:00
ubuntu
ubuntu
PHPMailer vulnerabilities
2023-03-15 00:00:00
PHPMailer vulnerability
2023-03-15 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.7

Confidence

High

EPSS

0.009

Percentile

82.8%

JSON
Related for USN-4505-1
openvas16cvelist1cve1veracode1osv9nessus10fedora6github1alpinelinux1debian2debiancve1prion1nvd1mageia1ubuntucve1suse2freebsd1ubuntu2