The mail transport (aka Swift_Transport_MailTransport) in Swift Mailer before 5.4.5 might allow remote attackers to pass extra parameters to

Summary

The mail transport (aka Swift_Transport_MailTransport) in Swift Mailer before 5.4.5 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted e-mail address in the (1) From, (2) ReturnPath, or (3) Sender header.

Timeline

1. Dec 28, 2016Public exploit on Exploit-DB

   EDB-40972, EDB-40986, EDB-42221

2. Dec 30, 2016, 7:00 PM UTCCVE published
3. Aug 6, 2024, 3:07 AM UTCRecord last updated
4. Oct 28, 2026EPSS reached 10%

   FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

• n/a n/a

  Version range not reported

• swiftmailer/swiftmailerPackagist

  fixed in 5.4.5

References 12