GHSA-g4pf-3jvq-2gcw: 
PHP vulnerability analysis and mitigation

A Remote Code Execution vulnerability was discovered in TYPO3 CMS through its third-party package swiftmailer/swiftmailer. The vulnerability was disclosed on January 3, 2017, affecting TYPO3 CMS versions 6.2.0 to 6.2.29, 7.6.0 to 7.6.14, and 8.0.0 to 8.5.0. The issue was assigned a low severity rating with a CVSS v2.0 score suggesting network accessibility with single authentication required (TYPO3 Advisory).

The vulnerability exists in the mail handling functionality of TYPO3 CMS, specifically in the swiftmailer/swiftmailer package used for mail actions. The package was found to be vulnerable to Remote Code Execution, particularly when using the mail()-Transport method. The vulnerability received a suggested CVSS v2.0 score of AV:N/AC:L/Au:S/C:N/I:P/A:N/E:F/RL:O/RC:C (TYPO3 Advisory).

The vulnerability could potentially allow attackers to execute remote code on affected systems when exploiting the mail functionality. However, the impact was rated as low severity, requiring authentication and only affecting the integrity of the system partially (TYPO3 Advisory).

The vulnerability requires network access and single authentication for exploitation. The mail()-Transport method in the swiftmailer package was specifically identified as the attack vector, which has since been deprecated (TYPO3 Advisory).

The vulnerability was patched in TYPO3 versions 6.2.30, 7.6.15, and 8.5.1. As an additional security measure, it is recommended to configure the TYPO3 MAIL settings to use any transport method other than mail(). Users are advised to update to these patched versions to resolve the vulnerability (TYPO3 Advisory, GitHub Advisory).