Lucene search
+L

4 matches found

Cvelist
Cvelist
added 2026/08/27 4:51 p.m.40 views

CVE-2026-47727 Trilium: RCE via `shareTemplate` relation missing `isDangerous` flag — Safe import bypass leading to EJS SSTI (Incomplete Fix of CVE-2026-45668)

Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the default-on "Safe import" filter fails to neutralize the shareTemplate relation because that relation is not marked as dangerous, allowing an attacker-supplied import archive to plant a server-side...

8.6CVSS0.00434EPSS
SaveExploits0References2
Rows per page
Query Builder