{"id":"GHSA-4qpj-gxxg-jqg4","aliases":[],"status":"published","title":"Swiftmailer Sendmail transport arbitrary shell execution","description":"Prior to 5.2.1, the sendmail transport (`Swift_Transport_SendmailTransport`) was vulnerable to an arbitrary shell execution if the \"From\" header came from a non-trusted source and no \"Return-Path\" is configured. This has been fixed in 5.2.1. If you are using sendmail as a transport, you are encouraged to upgrade as soon as possible.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2024-05-29T13:13:16Z","modified":"2024-12-04T05:24:49Z","fixes":[{"ecosystem":"Packagist","package":"swiftmailer/swiftmailer","fixed_in":["5.2.1"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Packagist","package":"swiftmailer/swiftmailer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"5.2.1"}]}]},{"source":"osv","ecosystem":"Packagist","package":"swiftmailer/swiftmailer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"5.2.1"}]}],"versions":["4.1.3","4.1.4","4.1.5","4.1.6","4.1.7","v4.1.8","v4.2.0","v4.2.1","v4.2.2","v4.3.0","v4.3.1","v5.0.0","v5.0.1","v5.0.2","v5.0.3","v5.1.0","v5.2.0"]}],"references":[{"url":"https://github.com/swiftmailer/swiftmailer/commit/b4b78af55e5e87f5ff07c06c6be7963c44562f80","tags":["web"]},{"url":"https://github.com/swiftmailer/swiftmailer/commit/efc430606a5faed864b969adfbdc5363ce2115a2","tags":["web"]},{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/swiftmailer/swiftmailer/2014-06-13.yaml","tags":["web"]},{"url":"https://web.archive.org/web/20150219063146/http://blog.swiftmailer.org/post/88660759928/security-fix-swiftmailer-5-2-1-released","tags":["web"]},{"url":"http://blog.swiftmailer.org/post/88660759928/security-fix-swiftmailer-5-2-1-released","tags":["web"]},{"url":"https://github.com/advisories/GHSA-4qpj-gxxg-jqg4"},{"url":"https://github.com/swiftmailer/swiftmailer","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-4qpj-gxxg-jqg4","title":"Swiftmailer Sendmail transport arbitrary shell execution","description":"Prior to 5.2.1, the sendmail transport (`Swift_Transport_SendmailTransport`) was vulnerable to an arbitrary shell execution if the \"From\" header came from a non-trusted source and no \"Return-Path\" is configured. This has been fixed in 5.2.1. If you are using sendmail as a transport, you are encouraged to upgrade as soon as possible.","status":"published","published":"2024-05-29T13:13:16Z","modified":"2024-05-29T13:13:17Z","updated_at":"2026-11-02T14:37:52.2286Z"}],"osv":[{"id":"GHSA-4qpj-gxxg-jqg4","title":"Swiftmailer Sendmail transport arbitrary shell execution","description":"Prior to 5.2.1, the sendmail transport (`Swift_Transport_SendmailTransport`) was vulnerable to an arbitrary shell execution if the \"From\" header came from a non-trusted source and no \"Return-Path\" is configured. This has been fixed in 5.2.1. If you are using sendmail as a transport, you are encouraged to upgrade as soon as possible.","status":"published","published":"2024-05-29T13:13:16Z","modified":"2024-12-04T05:24:49.427916Z","updated_at":"2026-11-02T15:46:37.528068Z"}]}}