{"id":"CVE-2024-58303","state":"PUBLISHED","title":"FoF Pretty Mail 1.1.2 Server Side Template Injection via Email Template Settings","description":"FoF Pretty Mail 1.1.2 contains a server-side template injection vulnerability that allows administrative users to inject malicious code into email templates. Attackers can execute system commands by inserting crafted template expressions that trigger arbitrary code execution during email generation.","publishedAt":"2025-12-11T21:40:26.839Z","updatedAt":"2026-10-08T15:21:10.254Z","severity":{"score":8.6,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["Flarum FriendsofFlarum Pretty Mail"],"affected":[{"vendor":"Flarum","product":"FriendsofFlarum Pretty Mail","packageURL":"pkg:composer/fof/pretty-mail","defaultStatus":"unaffected","versions":[{"version":"1.1.2","status":"affected"}]}],"references":["https://www.exploit-db.com/exploits/51948","https://flarum.org/","https://github.com/FriendsOfFlarum/pretty-mail","https://www.vulncheck.com/advisories/fof-pretty-mail-server-side-template-injection-via-email-template-settings"],"weaknesses":["CWE-1336"],"ingestedAt":"2026-10-29T20:08:12.933Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/58xxx/CVE-2024-58303.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-58303","state":"PUBLISHED","datePublished":"2025-12-11T21:40:26.839Z","dateUpdated":"2026-10-08T15:21:10.254Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2025-12-11T11:49:20.718Z"},"containers":{"cna":{"title":"FoF Pretty Mail 1.1.2 Server Side Template Injection via Email Template Settings","descriptions":[{"lang":"en","value":"FoF Pretty Mail 1.1.2 contains a server-side template injection vulnerability that allows administrative users to inject malicious code into email templates. Attackers can execute system commands by inserting crafted template expressions that trigger arbitrary code execution during email generation."}],"affected":[{"vendor":"Flarum","product":"FriendsofFlarum Pretty Mail","packageURL":"pkg:composer/fof/pretty-mail","defaultStatus":"unaffected","versions":[{"version":"1.1.2","status":"affected"}]}],"references":[{"url":"https://www.exploit-db.com/exploits/51948","name":"ExploitDB-51948","tags":["exploit"]},{"url":"https://flarum.org/","name":"Flarum Homepage","tags":["product"]},{"url":"https://github.com/FriendsOfFlarum/pretty-mail","name":"Pretty Mail GitHub Repository","tags":["product"]},{"url":"https://www.vulncheck.com/advisories/fof-pretty-mail-server-side-template-injection-via-email-template-settings","name":"VulnCheck Advisory: FoF Pretty Mail 1.1.2 Server Side Template Injection via Email Template Settings","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":8.6,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1336","description":"CWE-1336: Improper Neutralization of Special Elements Used in a Template Engine (SSTI)","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-10-08T15:21:10.254Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flarum:flarum:1.1.2:*:*:*:*:*:*:*"}]}]}],"credits":[{"lang":"en","type":"finder","value":"Chokri Hammedi, <chokri.hammedi@unknown>"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"vulncheck"},"datePublic":"2024-04-02T00:00:00.000Z"},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-12-18T21:35:25.679403Z","id":"CVE-2024-58303","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-01-27T20:39:20.545Z"}}]}}}