CVE-2024-35191

🗓️ 20 May 2024 21:09:15Reported by GitHub_MType

Formie plugin vulnerability in versions prior to 2.1.6 allows execution of malicious Twig code in form fields

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2024-35191 verbb/formie Server-Side Template Injection for variable-enabled settings	20 May 202420:26	–	cvelist
Github Security Blog	verbb/formie Server-Side Template Injection for variable-enabled settings	20 May 202420:26	–	github
Veracode	Template Injection	23 May 202412:01	–	veracode
Vulnrichment	CVE-2024-35191 verbb/formie Server-Side Template Injection for variable-enabled settings	20 May 202420:26	–	vulnrichment
OSV	CVE-2024-35191	20 May 202421:15	–	osv
OSV	verbb/formie Server-Side Template Injection for variable-enabled settings	20 May 202420:26	–	osv
NVD	CVE-2024-35191	20 May 202421:15	–	nvd

Vulners

Vulnrichment

Node

verbb formieRange<2.1.6

[
  {
    "vendor": "verbb",
    "product": "formie",
    "versions": [
      {
        "version": "< 2.1.6",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/verbb/formie/commit/90296edf7e707f117e760aa57e70dbd43a854420
github	www.github.com/verbb/formie/security/advisories/GHSA-v45m-hxqp-fwf5

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

20 May 2024 21:15Current

6.7Medium risk

Vulners AI Score6.7

CVSS34.4

EPSS0.00043

SSVC

CWE-1336