Lucene search
GoogleOSV:CVE-2020-11056HistoryMay 07, 2020 - 9:15 p.m.
CVE-2020-11056
2020-05-0721:15:11
Google
osv.dev
2
0.001 Low
EPSS
Percentile
31.2%
In Sprout Forms before 3.9.0, there is a potential Server-Side Template Injection vulnerability when using custom fields in Notification Emails which could lead to the execution of Twig code. This has been fixed in 3.9.0.
Related
cvelist
cvelist
CVE-2020-11056 Potential Code Injection in Sprout Forms
2020-05-07 20:50:12
nvd
nvd
CVE-2020-11056
2020-05-07 21:15:11
github
github
Potential Code Injection in Sprout Forms
2020-05-08 21:00:02
cve
cve
CVE-2020-11056
2020-05-07 21:15:11
veracode
veracode
Server-Side Template Injection (SSTI)
2020-05-08 05:10:53
osv
osv
Potential Code Injection in Sprout Forms
2020-05-08 21:00:02
prion
prion
Template injection
2020-05-07 21:15:00