Логотип exploitDog
bind:CVE-2024-24724
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-24724

Количество 2

Количество 2

nvd логотип

CVE-2024-24724

почти 2 года назад

Gibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template Injection leading to Remote Code Execution because input is passed to the Twig template engine (messengerSettings.php) without sanitization.

CVSS3: 9.8
EPSS: Средний
github логотип

GHSA-8qpg-h99j-c4j3

почти 2 года назад

Gibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template Injection leading to Remote Code Execution because input is passed to the Twig template engine (messengerSettings.php) without sanitization.

CVSS3: 9.8
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-24724

Gibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template Injection leading to Remote Code Execution because input is passed to the Twig template engine (messengerSettings.php) without sanitization.

CVSS3: 9.8
39%
Средний
почти 2 года назад
github логотип
GHSA-8qpg-h99j-c4j3

Gibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template Injection leading to Remote Code Execution because input is passed to the Twig template engine (messengerSettings.php) without sanitization.

CVSS3: 9.8
39%
Средний
почти 2 года назад

Уязвимостей на страницу