Exploit for Code Injection in Mjml Mjml_App

MJML Local Code Execution PoC A Proof-Of-Concept for CVE-2024...

CVE-2024-25293

creationtimestamp| type| source ---|---|--- 2024-03-01 07:26:54+00:00| seen| https://t.me/ctinow/197352 2024-03-01 07:32:01+00:00| seen| https://t.me/ctinow/197355...

CVE-2024-25293

mjml-app versions 3.0.4 and 3.1.0-beta were discovered to contain a remote code execution RCE via the href attribute...

CVE-2024-25293

The mjml-app versions 3.0.4 and 3.1.0-beta are vulnerable to Remote Code Execution (RCE) . The root cause is a security misconfiguration in the mj-button tag, where the href attribute allows for local code execution. Attackers can trigger the execution of local payloads (such as calc.exe or notep...

CVE-2024-25293

mjml-app versions 3.0.4 and 3.1.0-beta were discovered to contain a remote code execution RCE via the href attribute...

CVE-2024-25293

mjml-app versions 3.0.4 and 3.1.0-beta were discovered to contain a remote code execution RCE via the href attribute...