Skip to main content
Magento

Return to Question

Adds tags for both Magento 1 and 2
Link
edit approved Jan 15, 2017 at 0:24
Aad Mathijssen
edit approved Jan 15, 2017 at 0:24
Aad Mathijssen
  • 1.9k
  • 1
  • 16
  • 24
edited tags
Link
Qaisar Satti
Qaisar Satti
  • 32.5k
  • 18
  • 87
  • 137
Tweeted twitter.com/StackMagento/status/819515794572935168
Source Link
Danny Z
Danny Z
  • 189
  • 8

Should I be worried about the latest Zend-Mail RCE Vulnerability similar to the PHP-Mailer/Swift Mailer Vulnerability if I use Magento?

From the recently disclosed Zend-mail remote code execution vulnerability:

Affected Zend Framework versions:

Zend Framework < 2.4.11 Remote Code Execution (CVE-2016-10034)

zend-mail < 2.4.11

zend-mail < 2.7.2

Should I be worried about this if Magento uses Zend Framework? Does Magento take proper precautions in sanitizing all types of email forms out-of-the-box?