CVE-2024-58303
1 advisory.
Packagist/fof/pretty-mail CVE-2024-58303: high
FoF Pretty Mail has a server-side template injection vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.1.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-947q-2xw3-gx9c
- https://nvd.nist.gov/vuln/detail/CVE-2024-58303
- https://flarum.org
- https://github.com/FriendsOfFlarum/pretty-mail
- https://www.exploit-db.com/exploits/51948
- https://www.vulncheck.com/advisories/fof-pretty-mail-server-side-template-injection-via-email-template-settings
CVE-2024-58303 · published · modified · JSON