GHSA-f57v-q966-7fh6
GHSA-f57v-q966-7fh6 · Monolog Header injection in NativeMailerHandler
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
A header injection vulnerability has been identified in the NativeMailerHandler of the Monolog library. This vulnerability may allow an attacker to manipulate email headers when log messages are sent via email.
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: php
Produits et versions concernés
monolog/monolog Packagist
- Versions du logiciel
- 1.10.0
- 1.11.0
- 1.8.0
- 1.9.0
- 1.9.1
- Plages de versions concernées
- ECOSYSTEM: ≥ 1.8.0, < 1.12.0
Mettez à jour vers 1.12.0
Sources originales
- https://github.com/Seldaek/monolog/issues/458
- https://github.com/Seldaek/monolog/pull/448#issuecomment-68208704
- https://github.com/Seldaek/monolog/commit/515a096c864b00b3967f7f601680f85d4a2e4001
- https://github.com/FriendsOfPHP/security-advisories/blob/master/monolog/monolog/2014-12-29-1.yaml
- https://github.com/Seldaek/monolog
- https://osv.dev/vulnerability/GHSA-f57v-q966-7fh6