CVE-2020-7799

2020-01-2812:46:52

mitre

www.cve.org

7.1 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.5%

JSON

An issue was discovered in FusionAuth before 1.11.0. An authenticated user, allowed to edit e-mail templates (Home -> Settings -> Email Templates) or themes (Home -> Settings -> Themes), can execute commands on the underlying operating system by abusing freemarker.template.utility.Execute in the Apache FreeMarker engine that processes custom templates.