Servers and applications
CVE-2017-5223
An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML document to make it usable as an email message body. One of the transformations is to convert relative image URLs into attachments using a script-provided base directory. If no base directory is provided, it resolves to /, meaning that relative image URLs get treated as absolute…
- Severity
- Medium 5.5
- Published
- 16 Jan 2017
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Exploit chance
- 2.1% in the next 30 daysHigher than 82% of CVEs. EPSS by FIRST, 11 Nov 2026
- Weakness
- Information exposure (CWE-200)
- Attack
- Needs local access · Needs a user account · No user action needed
- Attacker can
- Read data
- CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N- Sources
- NVD
Description
An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML document to make it usable as an email message body. One of the transformations is to convert relative image URLs into attachments using a script-provided base directory. If no base directory is provided, it resolves to /, meaning that relative image URLs get treated as absolute local file paths and added as attachments. To form a remote vulnerability, the msgHTML method must be called, passed an unfiltered, user-supplied HTML document, and must not set a base directory.
Affected software
| Software | Affected versions |
|---|---|
PHPMailerServers and applications · cpe:a:phpmailer_project:phpmailer |
|