15 matches found
CVE-2024-27448
MailDev 2 through 2.1.0 allows Remote Code Execution via a crafted Content-ID header for an e-mail attachment, leading to lib/mailserver.js writing arbitrary code into the routes.js file...
Exploit for CVE-2024-27448
MailDev 2.1.0 RCE Exploit CVE-2024-27448 MailDev 2 throu...
Remote Code Execution
maildev is vulnerable to Remote Code Execution. The vulnerability is due to insufficient input validation and sanitization of crafted Content-ID header for an e-mail attachment, resulting in lib/mailserver.js writing arbitrary code into the routes.js file...
GHSA-VC6Q-CCJ9-9R89 MailDev Remote Code Execution
MailDev 2 through 2.1.0 allows Remote Code Execution via a crafted Content-ID header for an e-mail attachment, leading to lib/mailserver.js writing arbitrary code into the routes.js file...
MailDev Remote Code Execution
MailDev 2 through 2.1.0 allows Remote Code Execution via a crafted Content-ID header for an e-mail attachment, leading to lib/mailserver.js writing arbitrary code into the routes.js file...
CVE-2024-27448
MailDev 2 through 2.1.0 allows Remote Code Execution via a crafted Content-ID header for an e-mail attachment, leading to lib/mailserver.js writing arbitrary code into the routes.js file...
CVE-2024-27448
MailDev versions 2 through 2.1.0 are vulnerable to Remote Code Execution (RCE) due to insufficient input validation and sanitization of a crafted Content-ID header in an e-mail attachment. This flaw allows an attacker to trigger lib/mailserver.js to write arbitrary code into the routes.js file. P...
CVE-2024-27448
MailDev 2 through 2.1.0 allows Remote Code Execution via a crafted Content-ID header for an e-mail attachment, leading to lib/mailserver.js writing arbitrary code into the routes.js file...
CVE-2024-27448
MailDev 2 through 2.1.0 allows Remote Code Execution via a crafted Content-ID header for an e-mail attachment, leading to lib/mailserver.js writing arbitrary code into the routes.js file...
CVE-2024-27448
MailDev 2 through 2.1.0 allows Remote Code Execution via a crafted Content-ID header for an e-mail attachment, leading to lib/mailserver.js writing arbitrary code into the routes.js file...
CVE-2024-27448: Cross-Site Request Forgery (CSRF)
MailDev 2 through 2.1.0 allows Remote Code Execution via a crafted Content-ID header for an e-mail attachment, leading to lib/mailserver.js writing arbitrary code into the routes.js file...
CVE-2024-27448
MailDev 2 through 2.1.0 allows Remote Code Execution via a crafted Content-ID header for an e-mail attachment, leading to lib/mailserver.js writing arbitrary code into the routes.js file...
PT-2024-21904 · Maildev · Maildev
Name of the Vulnerable Software and Affected Versions: MailDev versions 2 through 2.1.0 Description: The issue allows Remote Code Execution via a crafted Content-ID header for an e-mail attachment, leading to lib/mailserver.js writing arbitrary code into the routes.js file. Recommendations: For...
MailDev security vulnerabilities
MailDev is a simple way to test project-generated emails during development in MailDev open source. A security vulnerability exists in MailDev versions 2 through 2.1.0, which stems from a vulnerability that allows an attacker to remotely perform code execution via a carefully crafted Content-ID...