CVE-2025-67898Medium· 4.5▾ SunlitMJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 24.8 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-83784High· 8.8Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
CVE-2026-83746High· 8.1Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
CVE-2026-83683Medium· 6.5Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.
CVE-2026-70297High· 8.8Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.
CVE-2025-36357High· 8.0IBM Planning Analytics Local 2.1.0 through 2.1.14 could allow a remote authenticated user to traverse directories on the system
CVE-2025-13282High· 8.1TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Delete vulnerability