Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-65hw-c9g5-r8mm

Опубликовано: 28 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 10

Описание

IPW Systems Metazo through 8.1.3 allows unauthenticated Remote Code Execution because smartyValidator.php enables the attacker to provide template expressions, aka Server-Side Template-Injection. All instances have been patched by the Supplier.

IPW Systems Metazo through 8.1.3 allows unauthenticated Remote Code Execution because smartyValidator.php enables the attacker to provide template expressions, aka Server-Side Template-Injection. All instances have been patched by the Supplier.

EPSS

Процентиль: 52%
0.00289
Низкий

10 Critical

CVSS3

Дефекты

CWE-1336
CWE-94

Связанные уязвимости

CVSS3: 10
nvd
10 месяцев назад

IPW Systems Metazo through 8.1.3 allows unauthenticated Remote Code Execution because smartyValidator.php enables the attacker to provide template expressions, aka Server-Side Template-Injection. All instances have been patched by the Supplier.

EPSS

Процентиль: 52%
0.00289
Низкий

10 Critical

CVSS3

Дефекты

CWE-1336
CWE-94