Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vpgr-vqw9-62cw

Опубликовано: 26 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6

Описание

Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1, allows remote attackers to execute arbitrary code via a crafted payload to the Markup Sandbox feature.

Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1, allows remote attackers to execute arbitrary code via a crafted payload to the Markup Sandbox feature.

EPSS

Процентиль: 74%
0.00806
Низкий

6 Medium

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 6
nvd
почти 2 года назад

Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1, allows remote attackers to execute arbitrary code via a crafted payload to the Markup Sandbox feature.

EPSS

Процентиль: 74%
0.00806
Низкий

6 Medium

CVSS3

Дефекты

CWE-94