CVE-2025-67843 in Mintlify

Riassunto

di MITRE • 19/12/2025

A Server-Side Template Injection (SSTI) vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15 allows remote attackers to execute arbitrary code via inline JSX expressions in an MDX file.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsabile: MITRE
• Prenotare: 12/12/2025
• Divulgazione: 19/12/2025
• Moderazione: accettato
• Voce: VDB-337534
• CPE: pronto
• CWE: CWE-1336 (confermato)
• CVSS: 9.8 (NVD)
• EPSS: 0.01074
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-67843
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-67843
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-67843/