MailDev Remote Code Execution

Description

MailDev 2 through 2.1.0 allows Remote Code Execution via a crafted Content-ID header for an e-mail attachment, leading to lib/mailserver.js writing arbitrary code into the routes.js file.

Recommendation

No fix is available yet. Followings are affected versions:

• >= 2.0.0-beta1, <= 2.1.0

References

• GHSA-vc6q-ccj9-9r89
• intrix.com.au
• CVE-2024-27448
• CWE-22
• CWE-352
• CAPEC-310
• OWASP 2021-A1
• OWASP 2021-A6

Related Issues

• angular-base64-upload vulnerable to unauthenticated remote code execution - CVE-2024-42640
• Angular Expressions - Remote Code Execution when using locals - CVE-2024-54152
• Remote Code Execution on click of <a> Link in markdown preview - CVE-2024-49362
• Nuxt vulnerable to remote code execution via the browser when running the test locally - CVE-2024-34344

Tags:

npm

maildev