CVE-2021-34551

PHPMailer before 6.5.0 on Windows allows remote code execution if lang_path is untrusted data and has a UNC pathname

published June 16, 2021

CVSS
—
EPSS
3%
Percentile
86.4
In the wild
Unconfirmed
What it is

PHPMailer before 6.5.0 on Windows allows remote code execution if lang_path is untrusted data and has a UNC pathname.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02803 · 86.4th percentile
Published
2021-06-16T17:23Z
EPSS history
Timeline
  • 16 JUN 17:23Z
    PHPMailer before 6.5.0 on Windows allows remote code execution if lang_path is untrusted data and has a UNC pathname
    cvelistv5