CVE-2020-12827 – MJML 4.6.2 Path Traversal

https://notcve.org/view.php?id=CVE-2020-12827

16 Jun 2020 — MJML prior to 4.6.3 contains a path traversal vulnerability when processing the mj-include directive within an MJML document. MJML versiones anteriores a 4.6.3, contiene una vulnerabilidad de salto de ruta cuando se procesa una directiva mj-include dentro de un documento de MJML MJML versions 4.6.2 and below suffer from a path traversal vulnerability. • https://packetstorm.news/files/id/158111 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •