Fluid Attacks Database

Description

Remote code execution in zend-mail via Sendmail adapter

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
packagist	zendframework/zend-mail	>=0 <2.4.11 \|\| >=2.5.0 <2.7.2	2.4.11, 2.7.2
packagist	zendframework/zendframework	>=0 <2.4.11	2.4.11

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.