PT-2022-24932

Name of the Vulnerable Software and Affected Versions Pimcore versions prior to 10.5.9 Description The user-controlled twig templates rendering in Pimcore/Mail and ClassDefinitionLayoutText is vulnerable to server-side template injection, which could lead to remote code execution. Recommendations...