Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/46051?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/46051?format=api", "vulnerability_id": "VCID-44d3-4txm-cyc3", "summary": "Remote Code Execution vulnerability in PHPMailer 6.4.1 running on Windows\nPHPMailer 6.4.1 contains a possible remote code execution vulnerability through the `$lang_path` parameter of the `setLanguage()` method. If the `$lang_path` parameter is passed unfiltered from user input, it can be set to [a UNC path](https://docs.microsoft.com/en-us/dotnet/standard/io/file-path-formats#unc-paths), and if an attacker is also able to create a remote mount on the server that the UNC path points to, a script file under their control may be executed. \n\n### Impact\nArbitrary code may be run by a remote attacker under the web server or PHP process running on Window hosts.\n\n### Patches\nMitigated in PHPMailer 6.5.0 by no longer treating translation files as PHP code, but by parsing their text content directly.\nThis approach avoids the possibility of executing unknown code while retaining backward compatibility. This isn't ideal, so the current translation format is deprecated and will be replaced in the next major release.\n\n### Workarounds\nAny of:\n* Ensure that calling code does not pass unfiltered user-supplied data to the `$lang_path` parameter of the `setLanguage()` method.\n* Block or filter the use of unknown UNC paths in this parameter (or altogether).\n* Ensure that unauthorised users do not have the ability to read from unknown remote servers via UNC paths.\n* Run on an OS that does not support UNC paths\n\n### References\n[CVE-2021-34551](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-34551).\n\nReported by [listensec.com](https://listensec.com) via Tidelift.\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [PHPMailer](https://github.com/PHPMailer/PHPMailer)\n* [Email the maintainers](mailto:phpmailer@synchromedia.co.uk)", "aliases": [ { "alias": "CVE-2021-34551" }, { "alias": "GHSA-7q44-r25x-wm4q" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/76359?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.5.0", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.5.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/928214?format=api", "purl": "pkg:deb/debian/libphp-phpmailer@0?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libphp-phpmailer@0%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/928209?format=api", "purl": "pkg:deb/debian/libphp-phpmailer@6.2.0-2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libphp-phpmailer@6.2.0-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/928207?format=api", "purl": "pkg:deb/debian/libphp-phpmailer@6.6.3-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libphp-phpmailer@6.6.3-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/928210?format=api", "purl": "pkg:deb/debian/libphp-phpmailer@6.9.3-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libphp-phpmailer@6.9.3-1%3Fdistro=trixie" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/153733?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-7kvh-8w1t-2kej" }, { "vulnerability": "VCID-cq4m-3q7u-cbg3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-n13m-y4ks-euep" }, { "vulnerability": "VCID-xrtk-1rmg-7uca" }, { "vulnerability": "VCID-ywsv-ddhg-b7es" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/153734?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-7kvh-8w1t-2kej" }, { "vulnerability": "VCID-cq4m-3q7u-cbg3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-n13m-y4ks-euep" }, { "vulnerability": "VCID-xrtk-1rmg-7uca" }, { "vulnerability": "VCID-ywsv-ddhg-b7es" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/153735?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-7kvh-8w1t-2kej" }, { "vulnerability": "VCID-cq4m-3q7u-cbg3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-n13m-y4ks-euep" }, { "vulnerability": "VCID-xrtk-1rmg-7uca" }, { "vulnerability": "VCID-ywsv-ddhg-b7es" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/153736?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-7kvh-8w1t-2kej" }, { "vulnerability": "VCID-cq4m-3q7u-cbg3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-n13m-y4ks-euep" }, { "vulnerability": "VCID-xrtk-1rmg-7uca" }, { "vulnerability": "VCID-ywsv-ddhg-b7es" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/153737?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-7kvh-8w1t-2kej" }, { "vulnerability": "VCID-cq4m-3q7u-cbg3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-n13m-y4ks-euep" }, { "vulnerability": "VCID-xrtk-1rmg-7uca" }, { "vulnerability": "VCID-ywsv-ddhg-b7es" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/153738?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-7kvh-8w1t-2kej" }, { "vulnerability": "VCID-cq4m-3q7u-cbg3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-n13m-y4ks-euep" }, { "vulnerability": "VCID-xrtk-1rmg-7uca" }, { "vulnerability": "VCID-ywsv-ddhg-b7es" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/153739?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-7kvh-8w1t-2kej" }, { "vulnerability": "VCID-cq4m-3q7u-cbg3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-n13m-y4ks-euep" }, { "vulnerability": "VCID-xrtk-1rmg-7uca" }, { "vulnerability": "VCID-ywsv-ddhg-b7es" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/54887?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-7kvh-8w1t-2kej" }, { "vulnerability": "VCID-cq4m-3q7u-cbg3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-xrtk-1rmg-7uca" }, { "vulnerability": "VCID-ywsv-ddhg-b7es" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/153740?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-7kvh-8w1t-2kej" }, { "vulnerability": "VCID-cq4m-3q7u-cbg3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-xrtk-1rmg-7uca" }, { "vulnerability": "VCID-ywsv-ddhg-b7es" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/153741?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-7kvh-8w1t-2kej" }, { "vulnerability": "VCID-cq4m-3q7u-cbg3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-xrtk-1rmg-7uca" }, { "vulnerability": "VCID-ywsv-ddhg-b7es" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/153742?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-7kvh-8w1t-2kej" }, { "vulnerability": "VCID-cq4m-3q7u-cbg3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-xrtk-1rmg-7uca" }, { "vulnerability": "VCID-ywsv-ddhg-b7es" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/21470?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-cq4m-3q7u-cbg3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-xrtk-1rmg-7uca" }, { "vulnerability": "VCID-ywsv-ddhg-b7es" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/159797?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-cq4m-3q7u-cbg3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-xrtk-1rmg-7uca" }, { "vulnerability": "VCID-ywsv-ddhg-b7es" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/159798?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-cq4m-3q7u-cbg3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-xrtk-1rmg-7uca" }, { "vulnerability": "VCID-ywsv-ddhg-b7es" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/159799?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-cq4m-3q7u-cbg3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-xrtk-1rmg-7uca" }, { "vulnerability": "VCID-ywsv-ddhg-b7es" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/73211?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-xrtk-1rmg-7uca" }, { "vulnerability": "VCID-ywsv-ddhg-b7es" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/159800?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.19", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-xrtk-1rmg-7uca" }, { "vulnerability": "VCID-ywsv-ddhg-b7es" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.19" }, { "url": "http://public2.vulnerablecode.io/api/packages/73234?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-ywsv-ddhg-b7es" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.20" }, { "url": "http://public2.vulnerablecode.io/api/packages/23765?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-ywsv-ddhg-b7es" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/23766?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.22", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.22" }, { "url": "http://public2.vulnerablecode.io/api/packages/163167?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.23", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.23" }, { "url": "http://public2.vulnerablecode.io/api/packages/24428?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.24", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.24" }, { "url": "http://public2.vulnerablecode.io/api/packages/180716?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.25", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.25" }, { "url": "http://public2.vulnerablecode.io/api/packages/180717?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.26", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.26" }, { "url": "http://public2.vulnerablecode.io/api/packages/33303?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.27", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.27" }, { "url": "http://public2.vulnerablecode.io/api/packages/207806?format=api", "purl": "pkg:composer/phpmailer/phpmailer@5.2.28", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.28" }, { "url": "http://public2.vulnerablecode.io/api/packages/163168?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.0.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.0.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/163169?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.0.0rc2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.0.0rc2" }, { "url": "http://public2.vulnerablecode.io/api/packages/163170?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.0.0rc3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.0.0rc3" }, { "url": "http://public2.vulnerablecode.io/api/packages/163171?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.0.0rc4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.0.0rc4" }, { "url": "http://public2.vulnerablecode.io/api/packages/163172?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.0.0rc5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-jca1-hyks-kud3" }, { "vulnerability": "VCID-zju7-7wax-zfhz" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.0.0rc5" }, { "url": "http://public2.vulnerablecode.io/api/packages/33302?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/180718?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/180719?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/180720?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.0.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/180721?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/180722?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.0.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-f585-qf89-f7f3" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.0.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/33304?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.0.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.0.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/207807?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.0.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.0.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/207808?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/207809?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/207810?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.1.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.1.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/207811?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.1.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.1.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/207812?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.1.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.1.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/207813?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.1.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-16kp-5zpw-fbha" }, { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.1.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/73566?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.1.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.1.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/252208?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.1.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.1.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/244803?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.1.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-4mjb-ur86-hkaz" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.1.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/244804?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.2.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-4mjb-ur86-hkaz" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.2.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/244805?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.3.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-4mjb-ur86-hkaz" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.3.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/244806?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.4.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-4mjb-ur86-hkaz" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.4.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/77352?format=api", "purl": "pkg:composer/phpmailer/phpmailer@6.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-44d3-4txm-cyc3" }, { "vulnerability": "VCID-jca1-hyks-kud3" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.4.1" } ], "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-34551", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02108", "scoring_system": "epss", "scoring_elements": "0.84272", "published_at": "2026-05-14T12:55:00Z" }, { "value": "0.02108", "scoring_system": "epss", "scoring_elements": "0.84063", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.02108", "scoring_system": "epss", "scoring_elements": "0.84064", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.02108", "scoring_system": "epss", "scoring_elements": "0.84088", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.02108", "scoring_system": "epss", "scoring_elements": "0.84094", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.02108", "scoring_system": "epss", "scoring_elements": "0.84111", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.02108", "scoring_system": "epss", "scoring_elements": "0.84105", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.02108", "scoring_system": "epss", "scoring_elements": "0.84101", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.02108", "scoring_system": "epss", "scoring_elements": "0.84123", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.02108", "scoring_system": "epss", "scoring_elements": "0.84125", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.02108", "scoring_system": "epss", "scoring_elements": "0.84128", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.02108", "scoring_system": "epss", "scoring_elements": "0.84152", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.02108", "scoring_system": "epss", "scoring_elements": "0.84159", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.02108", "scoring_system": "epss", "scoring_elements": "0.84163", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.02108", "scoring_system": "epss", "scoring_elements": "0.84183", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.02108", "scoring_system": "epss", "scoring_elements": "0.84208", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.02108", "scoring_system": "epss", "scoring_elements": "0.84225", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.02108", "scoring_system": "epss", "scoring_elements": "0.84223", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.02108", "scoring_system": "epss", "scoring_elements": "0.84241", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.02108", "scoring_system": "epss", "scoring_elements": "0.84033", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.02108", "scoring_system": "epss", "scoring_elements": "0.84046", "published_at": "2026-04-02T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-34551" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/phpmailer/phpmailer/CVE-2021-34551.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/phpmailer/phpmailer/CVE-2021-34551.yaml" }, { "reference_url": "https://github.com/PHPMailer/PHPMailer/blob/master/SECURITY.md", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/PHPMailer/PHPMailer/blob/master/SECURITY.md" }, { "reference_url": "https://github.com/PHPMailer/PHPMailer/commit/acd264bf17ff4ac5c915f0d4226dce8a9ea70bc3", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/PHPMailer/PHPMailer/commit/acd264bf17ff4ac5c915f0d4226dce8a9ea70bc3" }, { "reference_url": "https://github.com/PHPMailer/PHPMailer/releases/tag/v6.5.0", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/PHPMailer/PHPMailer/releases/tag/v6.5.0" }, { "reference_url": "https://github.com/PHPMailer/PHPMailer/security/advisories/GHSA-7q44-r25x-wm4q", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/PHPMailer/PHPMailer/security/advisories/GHSA-7q44-r25x-wm4q" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YRMWGA4VTMXFB22KICMB7YMFZNFV3EJ", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YRMWGA4VTMXFB22KICMB7YMFZNFV3EJ" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YRMWGA4VTMXFB22KICMB7YMFZNFV3EJ/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YRMWGA4VTMXFB22KICMB7YMFZNFV3EJ/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FJYSOFCUBS67J3TKR74SD3C454N7VTYM", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FJYSOFCUBS67J3TKR74SD3C454N7VTYM" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FJYSOFCUBS67J3TKR74SD3C454N7VTYM/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FJYSOFCUBS67J3TKR74SD3C454N7VTYM/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34551", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34551" }, { "reference_url": "https://github.com/advisories/GHSA-7q44-r25x-wm4q", "reference_id": "GHSA-7q44-r25x-wm4q", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-7q44-r25x-wm4q" } ], "weaknesses": [ { "cwe_id": 434, "name": "Unrestricted Upload of File with Dangerous Type", "description": "The product allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment." }, { "cwe_id": 94, "name": "Improper Control of Generation of Code ('Code Injection')", "description": "The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment." }, { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." } ], "exploits": [], "severity_range_score": "7.0 - 8.9", "exploitability": "0.5", "weighted_severity": "8.0", "risk_score": 4.0, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-44d3-4txm-cyc3" }