EUVD-2020-3820

Malware in sbrugna...

CVE-2020-11467

Deskpro before 2019.8.0 is affected: an attacker can abuse accessible variables in the TWIG-based template context to reach a native unserialize function via the code parameter, allowing remote code execution by crafting a payload in /portal/api/style/edit-theme-set/template-sources. Remediation:...