Packagist/fof/pretty-mail CVE-2024-58303: high 8.6, EPSS 0.54%
FoF Pretty Mail has a server-side template injection vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.1.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-947q-2xw3-gx9c
- nvd: CVE-2024-58303
- https://flarum.org
- https://github.com/FriendsOfFlarum/pretty-mail
- https://www.exploit-db.com/exploits/51948
- https://www.vulncheck.com/advisories/fof-pretty-mail-server-side-template-injection-via-email-template-settings
CVE-2024-58303 · published · modified · JSON