Vulnerabilidades de /mailtrap-mailer

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de /mailtrap-mailer: 1 registro(s), com severidade, exploração e correções.

Mailtrap-mailer 1

Somente exploradas (KEV) →

CVE-2026-45755 Média · 5.3 CWE-306 14/07/2026

Symfony: Mailtrap Mailer Webhook Parser Never Verifies the X-Mt-Signature HMAC — Unauthenticated Webhook Event Injection

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.12 and 8.0.12, MailtrapRequestParser::doParse() received the configured webhook secret but ignored the X-Mt-Signature HMAC header, allowing unauthenticated POST requests to inject forged Mailtrap delivery, bounce, open, click, or spam events. This issue is fixed in versions 7.4.12 and 8.0.12.