{"id":"CVE-2021-34551","published":"2021-06-16T17:23:18Z","modified":"2024-08-04T00:12:50Z","title":"PHPMailer before 6.5.0 on Windows allows remote code execution if lang_path is untrusted data and has a UNC pathname","vendor":null,"product":null,"tier":"tail","description":{"text":"PHPMailer before 6.5.0 on Windows allows remote code execution if lang_path is untrusted data and has a UNC pathname.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.02803,"percentile":0.86483,"provenance":"source"},"cwes":[],"references":[{"url":"https://github.com/PHPMailer/PHPMailer/blob/master/SECURITY.md","tags":["x_refsource_CONFIRM"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FJYSOFCUBS67J3TKR74SD3C454N7VTYM/","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YRMWGA4VTMXFB22KICMB7YMFZNFV3EJ/","tags":["vendor-advisory","x_refsource_FEDORA"]}],"priority":{"score":17.3,"factors":[{"name":"EPSS percentile","points":17.3}]},"affected":[{"ecosystem":"Packagist","package":"phpmailer/phpmailer","vulnerableRanges":["<6.5.0"],"patched":["6.5.0"],"from":["GHSA-7q44-r25x-wm4q"],"provenance":"source"}],"euvd":{"id":"EUVD-2021-1283","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2018-19296","published":"2018-11-16","fixed":"6.0.6","kev":false},{"cve":"CVE-2020-13625","published":"2020-06-08","fixed":"6.1.6","kev":false},{"cve":"CVE-2020-36326","published":"2021-04-28","fixed":"6.4.1","kev":false,"link":{"from":"CVE-2020-36326","to":"CVE-2021-34551","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:phpmailer/phpmailer","fromFixed":"6.4.1","toFixed":"6.5.0","daysApart":49}]}},{"cve":"CVE-2021-34551","published":"2021-06-16","fixed":"6.5.0","kev":false},{"cve":"CVE-2021-3603","published":"2021-06-17","fixed":"6.5.0","kev":false}],"package":"Packagist:phpmailer/phpmailer"}}