Lucene search

K
cveMitreCVE-2024-25293
HistoryMar 01, 2024 - 6:15 a.m.

CVE-2024-25293

2024-03-0106:15:48
CWE-94
mitre
web.nvd.nist.gov
50
cve-2024-25293
rce
mjml-app
security vulnerability
remote code execution
nvd

CVSS3

9.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

8.2

Confidence

High

EPSS

0

Percentile

9.0%

mjml-app versions 3.0.4 and 3.1.0-beta were discovered to contain a remote code execution (RCE) via the href attribute.

CVSS3

9.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

8.2

Confidence

High

EPSS

0

Percentile

9.0%