CVE-2025-67898

MediumCVSS 4.5/10Last modified Oct 14, 2026

Description

MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.

Metrics

CVSS 3.1 4.5/10CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L

Weakness enumeration

CWE-36

Affected software

No affected versions have been published.

Timeline

Published: Dec 14, 2025
Last modified: Oct 14, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-678992.9uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input contain CVE-2025-67904.3The Quiz and Survey Master (QSM) WordPress plugin before 10.2.3 does not have CSRF check in place when updating its settings, which could a CVE-2025-679008.1NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.CVE-2025-679015.3openrsync through 0.5.0, as used in OpenBSD through 7.8 and on other platforms, allows a client to cause a server SIGSEGV by specifying a le CVE-2025-679035.3Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification bypass.CVE-2025-679058.7Malwarebytes AdwCleaner before v.8.7.0 runs as Administrator and performs an insecure log file delete operation in which the target location CVE-2025-679069.0In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path.CVE-2025-679097.5Authorization Bypass Through User-Controlled Key vulnerability in WP Swings Membership For WooCommerce membership-for-woocommerce allows Exp CVE-2025-67918.8In the monitoring event logs page, it is possible to alter the http request to insert a reflect payload in the DB. Caused by an Improper Neu CVE-2025-679109.1Unrestricted Upload of File with Dangerous Type vulnerability in contentstudio Contentstudio contentstudio allows Upload a Web Shell to a We CVE-2025-679119.8Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite allows Object Injection.This issue affect CVE-2025-679126.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Premio Stars Testimonials stars-testim