53 matches found
PrestaShop Security Breach
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop versions prior to 3.5.1, which stems from a vulnerability that...
CVE-2024-24304
The CVE-2024-24304 affects the Mailjet module for PrestaShop prior to version 3.5.1. A guest can download technical information without restriction due to the underlying design in this module, enabling exposure of internal details. The issue is documented across multiple sources (NVD/Red Hat/CVE ...
PT-2024-20347 · Mailjet · Mailjet Module For Prestashop
Name of the Vulnerable Software and Affected Versions: Mailjet module for PrestaShop versions prior to 3.5.1 Description: A guest can download technical information without restriction in the Mailjet module for PrestaShop. Recommendations: For versions prior to 3.5.1, update to version 3.5.1 or...
CVE-2024-24304
In the module "Mailjet" mailjet from Mailjet for PrestaShop before versions 3.5.1, a guest can download technical information without restriction...
Malicious code in mailjet-old-react-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f341e416859da201efd36b62dd26528ba230a7ab134f96c2944b2de103f7179f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in mailjet-react-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93fb770c6e4d41201a5a99a6c80f625e3841f7f5a30fbe615ae73112bc5d9dbd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4456 Malicious code in mailjet-old-react-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f341e416859da201efd36b62dd26528ba230a7ab134f96c2944b2de103f7179f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4457 Malicious code in mailjet-react-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93fb770c6e4d41201a5a99a6c80f625e3841f7f5a30fbe615ae73112bc5d9dbd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Mailjet MJML Path Traversal Vulnerability
Mailjet MJML is a responsive email framework from the French company Mailjet . A path traversal vulnerability exists in Mailjet MJML 4.6.2 and earlier versions. An attacker could send a specially crafted e-mail containing the sequence '/... /' sequence to view arbitrary files on the system...
Mailjet - Highly critical - Arbitrary PHP code execution - SA-CONTRIB-2017-005
The Mailjet module integrates with a 3rd party system to deliver site-generated emails, including newsletters, system notifications, etc. The Mailjet module included v5.2.8 of the PHPMailer library in its "includes" directory. Per PSA-2016-004, this version of the PHPMailer library was vulnerable...
CVE-2026-45754: Mailjet Mailer and LOX24 Notifier Webhook Parsers Never Verify the Configured Secret: Unauthenticated Webhook Event Injection
More info at https://symfony.com/cve-2026-45754...
CVE-2026-45754: Mailjet Mailer and LOX24 Notifier Webhook Parsers Never Verify the Configured Secret: Unauthenticated Webhook Event Injection
More info at https://symfony.com/cve-2026-45754...
CVE-2026-45754: Mailjet Mailer and LOX24 Notifier Webhook Parsers Never Verify the Configured Secret: Unauthenticated Webhook Event Injection
More info at https://symfony.com/cve-2026-45754...