CVE-2021-34551

Description

PHPMailer before 6.5.0 on Windows allows remote code execution if lang_path is untrusted data and has a UNC pathname.

Affected Platforms

Weakness Type

CWE-434

References

• https://github.com/PHPMailer/PHPMailer/blob/master/SECURITY.md
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://github.com/PHPMailer/PHPMailer/blob/master/SECURITY.md
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro…