Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3jgv-pfqj-v626

Опубликовано: 26 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload to the Batch-Issue Exam Tickets function.

Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload to the Batch-Issue Exam Tickets function.

EPSS

Процентиль: 88%
0.04019
Низкий

7.5 High

CVSS3

Дефекты

CWE-1336
CWE-94

Связанные уязвимости

CVSS3: 7.5
nvd
почти 2 года назад

Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload to the Batch-Issue Exam Tickets function.

EPSS

Процентиль: 88%
0.04019
Низкий

7.5 High

CVSS3

Дефекты

CWE-1336
CWE-94