** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Magnesium-PHP up to 0.3.0. It has been classified as problematic. Affected is the function formatEmailString of the file src/Magnesium/Message/Base.php. The manipulation of the argument email/name leads to injection. Upgrading to version 0.3.1 is able to address this issue. The patch is identified as 500d340e1f6421007413cc08a8383475221c2604. It is recommended to upgrade the affected component. VDB-244482 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
References
| Link | Resource |
|---|---|
| https://github.com/floriangaerber/Magnesium-PHP/commit/500d340e1f6421007413cc08a8383475221c2604 | Patch |
| https://github.com/floriangaerber/Magnesium-PHP/releases/tag/v0.3.1 | Release Notes |
| https://vuldb.com/?ctiid.244482 | Third Party Advisory |
| https://vuldb.com/?id.244482 | Third Party Advisory |
| https://github.com/floriangaerber/Magnesium-PHP/commit/500d340e1f6421007413cc08a8383475221c2604 | Patch |
| https://github.com/floriangaerber/Magnesium-PHP/releases/tag/v0.3.1 | Release Notes |
| https://vuldb.com/?ctiid.244482 | Third Party Advisory |
| https://vuldb.com/?id.244482 | Third Party Advisory |
Configurations
History
21 Nov 2024, 03:22
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 2.7
v3 : 3.5 |
| References | () https://github.com/floriangaerber/Magnesium-PHP/commit/500d340e1f6421007413cc08a8383475221c2604 - Patch | |
| References | () https://github.com/floriangaerber/Magnesium-PHP/releases/tag/v0.3.1 - Release Notes | |
| References | () https://vuldb.com/?ctiid.244482 - Third Party Advisory | |
| References | () https://vuldb.com/?id.244482 - Third Party Advisory |
14 Nov 2023, 14:44
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CPE | cpe:2.3:a:floriangaerber:magnesium-php:*:*:*:*:*:*:*:* | |
| References | (MISC) https://github.com/floriangaerber/Magnesium-PHP/releases/tag/v0.3.1 - Release Notes | |
| References | (MISC) https://github.com/floriangaerber/Magnesium-PHP/commit/500d340e1f6421007413cc08a8383475221c2604 - Patch | |
| References | (MISC) https://vuldb.com/?id.244482 - Third Party Advisory | |
| References | (MISC) https://vuldb.com/?ctiid.244482 - Third Party Advisory | |
| First Time |
Floriangaerber
Floriangaerber magnesium-php |
07 Nov 2023, 02:43
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Magnesium-PHP up to 0.3.0. It has been classified as problematic. Affected is the function formatEmailString of the file src/Magnesium/Message/Base.php. The manipulation of the argument email/name leads to injection. Upgrading to version 0.3.1 is able to address this issue. The patch is identified as 500d340e1f6421007413cc08a8383475221c2604. It is recommended to upgrade the affected component. VDB-244482 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. |
05 Nov 2023, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-11-05 21:15
Updated : 2024-11-21 03:22
NVD link : CVE-2017-20187
Mitre link : CVE-2017-20187
CVE.ORG link : CVE-2017-20187
JSON object : View
Products Affected
floriangaerber
- magnesium-php
CWE
CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')