MAL-001

MAL-001: Injeção de Template do Lado do Servidor FreeMarker no Liferay Portal Um problema foi descoberto no Liferay - Portal =7.4.3.12-ga12. Ao inserir conteúdo malicioso nos Templates FTL, um atacante pode realizar ataques de SSTI Server-Side Template Injection, que podem explorar objetos expost...

CVE-2022-40634

CVE-2022-40634: Injection de modèle côté serveur FreeMarker dans CrafterCMS En insérant du contenu malveillant dans un modèle FTL, un attaquant peut effectuer des attaques SSTI Server-Side Template Injection, qui peuvent exploiter les objets exposés de FreeMarker pour contourner les restrictions ...

CVE-2026-29207

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue. Please note that in the updated version, "Data Resource" records with...

PT-2026-41844

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue. Please note that in the updated version, "Data Resource" records with...