CVE-2025-67898: CVE-2025-67898: güvenlik açığı

Açıklama (NVD)

MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.

Özet bilgiler

CVSS v3.1

4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L

EPSS

%0,26 (yüzdelik 18)

CWE

CWE-36

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• github.com
• CWE-36