Back to search
CVE-2024-58302
Published: Dec 11, 2025
Modified: Apr 7, 2026
PUBLISHED
Description
FoF Pretty Mail 1.1.2 contains a local file inclusion vulnerability that allows administrative users to include arbitrary server files in email templates. Attackers can exploit the template settings by inserting file inclusion payloads to read sensitive system files like /etc/passwd during email generation.
| Vendor | Product | Versions |
|---|---|---|
Flarum | FriendsofFlarum Pretty Mail | affected 1.1.2 |
Weaknesses (CWE)
References
ExploitDB-51947
exploit
Flarum Homepage
product
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now