Skip to content
Threat Feed
Subscribe

Product

Nodemailer (< 9.0.1)

1 brief RSS
high advisory

Nodemailer SSRF and Arbitrary File Read Vulnerability

Nodemailer versions before 9.0.1 fail to enforce security flags when processing message-level raw options, allowing authenticated attackers to perform SSRF and read arbitrary files.

nodemailer +1 vulnerability ssrf file-access smtp-injection
3t 1c