CVE-2018-19296
libphp-phpmailer: PHPMailer before 5.2.27 and 6.x before 6.0.6 is vulnerable to an object injection attack.
CVE-2018-19296 is fixed in libphp-phpmailer on 1 platform by libphp-phpmailer 5.2.14+dfsg-2.3+deb9u1build0.18.04.1 (version 5.2.14+dfsg-2.3+deb9u1build0.18.04.1), released November 16, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0223
82nd percentile
PHPMailer before 5.2.27 and 6.x before 6.0.6 is vulnerable to an object injection attack.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libphp-phpmailer · Ubuntu 18.04.6 LTS (bionic) | 5.2.14+dfsg-2.3+deb9u1build0.18.04.1 | libphp-phpmailer 5.2.14+dfsg-2.3+deb9u1build0.18.04.1 | Nov 16, 2018 |