Remote Code Execution

2024-04-0810:52:20

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

maildev

remote code execution

vulnerability

input validation

email attachment

sanitization

lib/mailserver.js

routes.js

AI Score

7.7

Confidence

High

EPSS

Percentile

15.5%

JSON

maildev is vulnerable to Remote Code Execution. The vulnerability is due to insufficient input validation and sanitization of crafted Content-ID header for an e-mail attachment, resulting in lib/mailserver.js writing arbitrary code into the routes.js file.