Name of the Vulnerable Software and Affected Versions Drupal core (affected versions not specified)

Description The issue is related to the sanitization of variables for shell arguments in the DefaultMailSystem::mail() function when sending email, which could potentially lead to remote code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.