Tim-Hoekstra/MailDev-2.1.0-Exploit-RCE

Tim-Hoekstra/MailDev-2.1.0-Exploit-RCE

GitHubGitHub
GitHubgithub.com
Releases0
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-27448↗
9.1 CRITICAL—

MailDev 2 through 2.1.0 allows Remote Code Execution via a crafted Content-ID header for an e-mail attachment, leading to lib/mailserver.js writing arbitrary code into the routes.js file.