GitHub Advisoryadvisory · Packagist

GHSA-g4pf-3jvq-2gcw TYPO3 Remote Code Execution in third party library swiftmailer

HIGH Published 2024-06-05 Modified 2024-06-05 Official page ↗
Ecosystem
Packagist
Packages
typo3/cms
Severity
High
Weaknesses
CWE-94
Reviewed
2024-06-05

Affected packages

• Packagist typo3/cms: >= 6.2.0, < 6.2.30 → fixed in 6.2.30 • Packagist typo3/cms: >= 7.6.0, < 7.6.15 → fixed in 7.6.15 • Packagist typo3/cms: >= 8.0.0, < 8.5.1 → fixed in 8.5.1

Description

TYPO3 uses the package swiftmailer/swiftmailer for mail actions. This package is known to be vulnerable to Remote Code Execution.

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References