Directory Traversal Vulnerability in MJML by MJMLio
CVE-2025-67898
4.5MEDIUM
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2025-67898?
MJML version 4.18.0 exposes a directory traversal vulnerability that allows attackers to test the existence of files and potentially read them, particularly in cases involving CSS files. This vulnerability arises from an incomplete resolution of a prior issue, which may lead to unauthorized access to sensitive information stored in the file system.
Affected Version(s)
MJML 0 <= 4.18.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.