CVE:CVE-2020-13625
CNNVD:CNNVD-202006-601
PHPMailer是一个用于发送电子邮件的PHP类库。
PHPMailer 6.1.6之前版本中存在安全漏洞，该漏洞源于在文件附件名称包含双引号字符，程序无法进行正确的转义。攻击者可利用该漏洞可能导致文件类型无法被正确解析。
solution:Upgrade phpmailer_project phpmailer to a higher version than 6.1.6,and avoid the version (,6.1.6); Upgrade fedoraproject fedora to a higher version than 31,32,and avoid the version 31,32; Upgrade canonical ubuntu_linux to a higher version than 18.04,and avoid the version 18.04; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0