Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:nodemailer:nodemailer:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Nodemailer SSRF and Arbitrary File Read Vulnerability

Nodemailer versions before 9.0.1 fail to enforce security flags when processing message-level raw options, allowing authenticated attackers to perform SSRF and read arbitrary files.

nodemailer +1 vulnerability ssrf file-access smtp-injection
3t 1c