CVE-2020-13625

Publication date

2020-06-08 16:03:22

Family

mitre

State

PUBLISHED

Description

PHPMailer before 6.1.6 contains an output escaping bug when the name of a file attachment contains a double quote character. This can result in the file type being misinterpreted by the receiver or any mail relay processing the message.