First published: Mon Jun 08 2020(Updated: )
Last updated 24 July 2024
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Phpmailer Project Phpmailer | <6.1.6 | |
Fedoraproject Fedora | =31 | |
Fedoraproject Fedora | =32 | |
Canonical Ubuntu Linux | =18.04 | |
Debian Debian Linux | =8.0 | |
Debian Debian Linux | =9.0 | |
debian/libphp-phpmailer | 6.2.0-2 6.6.3-1 6.9.1-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-13625 is a vulnerability in PHPMailer that allows for misinterpretation of file types in email attachments.
CVE-2020-13625 has a severity rating of 7.5 (high).
The affected software versions include libphp-phpmailer 6.0.6-0.1 and below, 6.1.6, 6.2.0-2, and 6.6.3-1.
To fix CVE-2020-13625, update your PHPMailer installation to version 6.1.6 or higher.
You can find more information about CVE-2020-13625 at the following references: [http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00067.html](http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00067.html) and [http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00085.html](http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00085.html).