Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-54q9-c4j4-jf82

Опубликовано: 12 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 6.9

Описание

FoF Pretty Mail 1.1.2 contains a local file inclusion vulnerability that allows administrative users to include arbitrary server files in email templates. Attackers can exploit the template settings by inserting file inclusion payloads to read sensitive system files like /etc/passwd during email generation.

FoF Pretty Mail 1.1.2 contains a local file inclusion vulnerability that allows administrative users to include arbitrary server files in email templates. Attackers can exploit the template settings by inserting file inclusion payloads to read sensitive system files like /etc/passwd during email generation.

EPSS

Процентиль: 17%
0.00056
Низкий

6.9 Medium

CVSS4

Дефекты

CWE-98

Связанные уязвимости

nvd
около 2 месяцев назад

FoF Pretty Mail 1.1.2 contains a local file inclusion vulnerability that allows administrative users to include arbitrary server files in email templates. Attackers can exploit the template settings by inserting file inclusion payloads to read sensitive system files like /etc/passwd during email generation.

EPSS

Процентиль: 17%
0.00056
Низкий

6.9 Medium

CVSS4

Дефекты

CWE-98