Every CVESearch/Get API key

GHSA-45xg-4w5x-j429

TYPO3 Arbitrary Shell Execution in Swiftmailer library

8.1 HighFix available

GHSA-45xg-4w5x-j429 is a high vulnerability (CVSS 8.1) in typo3/cms, published May 30, 2024. No source lists public exploit code. Fixed in typo3/cms 6.2.6.

Severity
8.1 HighCVSS 3.1, GitHub Advisories
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
6.2.6typo3/cms +4 more

Description

The swiftmailer library in use allows to execute arbitrary shell commands if the "From" header comes from a non-trusted source and no "Return-Path" is configured. Affected are only TYPO3 installation the configuration option

$GLOBALS['TYPO3_CONF_VARS']['MAIL']['transport']

is set to "sendmail". Installations with the default configuration are not affected.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Affected packages

Affected packages
PackageAffectedFixed
typo3/cms
Packagist
6.2.0 up to 6.2.6
6.2.6
typo3/cms
Packagist
6.1.0 up to 6.1.12
6.1.12
typo3/cms
Packagist
4.7.0 up to 4.7.20
4.7.20
typo3/cms
Packagist
4.5.0 up to 4.5.37
4.5.37
typo3/cms
Packagist
6.2.0 up to 6.2.6, plus listed versions
6.2.16.2.26.2.36.2.46.2.5
6.2.6

What each source reports

GitHub Advisories Score used8.1

TYPO3 Arbitrary Shell Execution in Swiftmailer library

The swiftmailer library in use allows to execute arbitrary shell commands if the "From" header comes from a non-trusted source and no "Return-Path" is configured. Affected are only TYPO3 installation the configuration option

$GLOBALS['TYPO3_CONF_VARS']['MAIL']['transport']

is set to "sendmail". Installations with the default configuration are not affected.

Record
GHSA-45xg-4w5x-j429
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-20
Updated
2026-11-02
OSV8.1

TYPO3 Arbitrary Shell Execution in Swiftmailer library

The swiftmailer library in use allows to execute arbitrary shell commands if the "From" header comes from a non-trusted source and no "Return-Path" is configured. Affected are only TYPO3 installation the configuration option

$GLOBALS['TYPO3_CONF_VARS']['MAIL']['transport']

is set to "sendmail". Installations with the default configuration are not affected.

Record
GHSA-45xg-4w5x-j429
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-20
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedGitHub Advisories, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open