PT-2023-10638 · Unknown · Magnesium-Php

CVE-2017-20187

·

Publicado

2023-11-05

·

Atualizado

2024-08-05

CVSS v3.1

3.5

Baixa

VetorAV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions Magnesium-PHP versions up to 0.3.0
Description A vulnerability was found in Magnesium-PHP, classified as problematic. The issue affects the formatEmailString function of the file src/Magnesium/Message/Base.php. The manipulation of the email/name argument leads to injection. This vulnerability only affects products that are no longer supported by the maintainer.
Recommendations For Magnesium-PHP versions up to 0.3.0, upgrade to version 0.3.1 to address this issue. As a temporary workaround, consider restricting the use of the formatEmailString function until the upgrade is applied.

Correção

Special Elements Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2017-20187
GHSA-8PP6-5QPW-85G3

Produtos afetados

Magnesium-Php