CVEvulnerability

CVE-2025-67898

4.5 MEDIUM Published 2025-12-14 Modified 2026-10-14 Official page ↗
Status
Deferred
Published
2025-12-14
Last modified
2026-10-14
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.5 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L
Weaknesses
CWE-36

Description

MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.

Related

Weakness · CWE (1)

  • CWE-36 Absolute Path Traversal weakness

References