View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0027003 | mantisbt | security | public | 2020-06-03 04:33 | 2020-08-07 20:25 |
Reporter | dregad | Assigned To | dregad | ||
Priority | normal | Severity | minor | Reproducibility | N/A |
Status | closed | Resolution | fixed | ||
Target Version | 2.24.2 | Fixed in Version | 2.24.2 | ||
Summary | 0027003: Update PHPMailer from 6.1.4 to 6.1.6 | ||||
Description | PHPMailer 6.1.6 fixes a vulnerability : Insufficient output escaping of attachment names (CVE-2020-13625), see the advisory for details. | ||||
Tags | No tags attached. | ||||
MantisBT: master-2.24 2fc66610 2020-06-03 00:55 Details Diff |
Bump phpmailer/phpmailer from 6.1.5 to 6.1.6 Includes security fix for CVE-2020-13625: Insufficient output escaping of attachment names [1] - [Release notes](https://github.com/PHPMailer/PHPMailer/releases) - [Changelog](https://github.com/PHPMailer/PHPMailer/blob/master/changelog.md) - [Commits](PHPMailer/PHPMailer@v6.1.5...v6.1.6) Fixes 0027003 [1]: https://github.com/advisories/GHSA-f7hx-fqxw-rvvj |
Affected Issues 0027003 |
|
mod - composer.lock | Diff File |