CVE-2024-27448
Published
CVSS v3
9.1
CRITICAL
CVSS v2
N/A
Affected
2
PROJECTS
Description
MailDev 2 through 2.1.0 allows Remote Code Execution via a crafted Content-ID header for an e-mail attachment, leading to lib/mailserver.js writing arbitrary code into the routes.js file.
:mailbox: SMTP Server + Web Interface for viewing and testing emails during development.
GitHub