CVE-2021-42651

A Server Side Template Injection SSTI vulnerability in Pentest-Collaboration-Framework v1.0.8 allows an authenticated remote attacker to execute arbitrary code through /project/PROJECTNAME/reports/...

PT-2022-11654

Name of the Vulnerable Software and Affected Versions Pentest-Collaboration-Framework version 1.0.8 Description A Server Side Template Injection SSTI vulnerability allows an authenticated remote attacker to execute arbitrary code through the "/project/PROJECTNAME/reports/" API endpoint...

CVE-2021-42651: Improper Control of Generation of Code

A Server Side Template Injection SSTI vulnerability in Pentest-Collaboration-Framework v1.0.8 allows an authenticated remote attacker to execute arbitrary code through /project/PROJECTNAME/reports/...