EUVD-2025-203312

MJML through 4.18.0 allows mj-include directory traversal to test file existence and in the type="css" case read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827...

@banhmi/email (>=1.0.0, <=1.3.0), @clevyr/pavo-mailer (0.0.12) +12 more potentially affected by CVE-2020-12827 via mjml (>=4.1.0, <=4.5.1)

mjml NPM version =4.1.0, =1.0.0, =0.2.0, =1.0.0, =0.1.13, =0.1.0, =0.1.10, =0.0.1, =4.1.2-1, =0.1.0, =0.1.0, =1.0.0, =1.0.1 Source cves: CVE-2020-12827 Source advisory: OSV:GHSA-4HCH-R9XF-6VFR...

CVE-2020-12827

Summary: MJML contains a path traversal vulnerability via the mj-include directive. The original CVE-2020-12827 affected MJML prior to 4.6.3, which was disclosed as a path traversal issue when processing mj-include. The connected advisories confirm that the fix was incomplete in subsequent update...

MJML 4.6.2 Path Traversal Vulnerability

Exploit for php platform in category web applications 1. ADVISORY INFORMATION ======================= Product: MJML Vendor URL: https://github.com/mjmlio/mjml/ Type: Path Traversal CWE-22 Date found: 2020-04-28 Date published: 2020-06-14 CVSSv3 Score: 7.2...