Veille CVE

Recherche « /mailtrap-mailer mailtrap-mailer »

1 CVE

  1. CVE-2026-45755 5.3 Moyenne

    symfony · /mailtrap-mailer mailtrap-mailer · Sensiolabs symfony

    Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.12 and 8.0.12, MailtrapRequestParser::doParse() received the configured webhook secret but ignored the X-Mt-Signature HMAC header, allowing unauthenticated POST requests to inject forged Mailtrap delivery, bounce, open, click, or spam events. This issue is fixed in versions 7.4.12 and 8.0.12.