MGASA-2017-0438
Updated php-phpmailer packages fix security vulnerability
No scoreFix available
Debugoutput wasn't set in constructor according to SAPI in use, resulting in potential XSS in default debug output.
What each source reports
OSV No score
Updated php-phpmailer packages fix security vulnerability
Debugoutput wasn't set in constructor according to SAPI in use, resulting in potential XSS in default debug output.
- Record
MGASA-2017-0438- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
php-phpmailerMageia:5 |
before 5.2.24-1.1.mga5 | 5.2.24-1.1.mga5 |
php-phpmailerMageia:6 |
before 5.2.24-1.1.mga6 | 5.2.24-1.1.mga6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2017-0438 is a vulnerability with no CVSS score yet in php-phpmailer, published December 1, 2017. No source lists public exploit code. Fixed in php-phpmailer 5.2.24-1.1.mga5.