GHSA-f57v-q966-7fh6
GHSA-f57v-q966-7fh6 · Monolog Header injection in NativeMailerHandler
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
A header injection vulnerability has been identified in the NativeMailerHandler of the Monolog library. This vulnerability may allow an attacker to manipulate email headers when log messages are sent via email.
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: php
Productos y versiones afectados
monolog/monolog Packagist
- Versiones
- 1.10.0
- 1.11.0
- 1.8.0
- 1.9.0
- 1.9.1
- Intervalos de versiones afectados
- ECOSYSTEM: ≥ 1.8.0, < 1.12.0
Actualiza a 1.12.0
Fuentes originales
- https://github.com/Seldaek/monolog/issues/458
- https://github.com/Seldaek/monolog/pull/448#issuecomment-68208704
- https://github.com/Seldaek/monolog/commit/515a096c864b00b3967f7f601680f85d4a2e4001
- https://github.com/FriendsOfPHP/security-advisories/blob/master/monolog/monolog/2014-12-29-1.yaml
- https://github.com/Seldaek/monolog
- https://osv.dev/vulnerability/GHSA-f57v-q966-7fh6