CVE-2025-67898

Published: Dec 14, 2025Modified: Jun 17, 2026Deferred

4.5

Vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L

Exploitability: 1.4 / Impact: 2.7

Source: MITRE (Secondary)

Description

MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.

Related CWEs

CWE-36

Absolute Path Traversal

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize absolute path sequences such as "/abs/path" that can resolve to a location that is outside of that directory.

References (1)

https://github.com/mjmlio/mjml/issues/3018

Source: cve@mitre.org

Timeline

No history available yet.