CVE-2024-25293

MJML 로컬 코드 실행 PoC CVE-2024-25293 취약점에 대한 개념 증명PoC입니다. mjml-app v3.0.4 및 3.1.0-beta에서 원격 코드 실행RCE이 발견되었습니다. 이 저장소에는 취약한 애플리케이션 예제와 이에 대한 개념 증명PoC 익스플로잇이 포함되어 있습니다. PoC로 프로세스를 자동화하는 python 파일이 있습니다. 1. 취약점 개요: 취약점 주제: 로컬 코드 실행 취약점 버전: mjml-app 3.0.4-win 및 mjml-app 3.1.0-beta 공격 유형: 원격 코드 실행 공격 구성...

CVE-2024-25293

mjml-app versions 3.0.4 and 3.1.0-beta were discovered to contain a remote code execution RCE via the href attribute...

Exploit for Code Injection in Mjml Mjml_App

MJML Local Code Execution PoC A Proof-Of-Concept for CVE-2024...

CVE-2024-25293

mjml-app versions 3.0.4 and 3.1.0-beta were discovered to contain a remote code execution RCE via the href attribute...

CVE-2024-25293

mjml-app versions 3.0.4 and 3.1.0-beta were discovered to contain a remote code execution RCE via the href attribute...

Remote code execution

mjml-app versions 3.0.4 and 3.1.0-beta were discovered to contain a remote code execution RCE via the href attribute...

CVE-2024-25293: Improper Control of Generation of Code

mjml-app versions 3.0.4 and 3.1.0-beta were discovered to contain a remote code execution RCE via the href attribute...

CVE-2024-25293

mjml-app versions 3.0.4 and 3.1.0-beta were discovered to contain a remote code execution RCE via the href attribute...

CVE-2024-25293

The mjml-app versions 3.0.4 and 3.1.0-beta are vulnerable to Remote Code Execution (RCE) . The root cause is a security misconfiguration in the mj-button tag, where the href attribute allows for local code execution. Attackers can trigger the execution of local payloads (such as calc.exe or notep...

MJML App Security Vulnerability

MJML App is an MJML open source MJML desktop application. A security vulnerability exists in mjml-app version 3.0.4 and 3.1.0-beta, which stems from a Remote Code Execution RCE vulnerability in the href attribute...

PT-2024-20866 · Mjml-App · Mjml-App

Name of the Vulnerable Software and Affected Versions: mjml-app versions 3.0.4 through 3.1.0-beta Description: The issue allows for remote code execution RCE via the href attribute. Recommendations: For versions 3.0.4 and 3.1.0-beta, consider restricting access to the href attribute until a patch...

CVE-2024-25293

mjml-app versions 3.0.4 and 3.1.0-beta were discovered to contain a remote code execution RCE via the href attribute...