GitHub Advisoryadvisory · Packagist

GHSA-hgr8-g756-vmg9 Zeta Components Mail Arbitrary code execution via a crafted email address

HIGH Published 2022-05-17 Modified 2024-04-23 Official page ↗
Aliases
CVE-2017-15806
Ecosystem
Packagist
Packages
zetacomponents/mail
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-94
Reviewed
2024-04-23

Affected packages

• Packagist zetacomponents/mail: < 1.8.2 → fixed in 1.8.2

Description

The send function in the ezcMailMtaTransport class in Zeta Components Mail before 1.8.2 does not properly restrict the set of characters used in the ezcMail returnPath property, which might allow remote attackers to execute arbitrary code via a crafted email address, as demonstrated by one containing "-X/path/to/wwwroot/file.php."

Related

Alias · CVE (1)

  • CVE-2017-15806 The send function in the ezcMailMtaTransport class in Zeta Components Mail before 1.8.2 does not properly restrict the set of characters… vulnerability

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References