7 matches found
CVE-2024-45186
FileSender before 2.49 allows server-side template injection SSTI for retrieving credentials...
CVE-2024-45186
FileSender before 2.49 allows server-side template injection SSTI for retrieving credentials...
CVE-2024-45186
The open-source web application FileSender is vulnerable to Server-Side Template Injection (SSTI) in versions prior to 2.49 . This flaw occurs within the server's template processing function, which can allow unauthorized users to retrieve critical credentials stored on the server. Over 600 insta...
CVE-2024-45186: Improper Control of Generation of Code
FileSender before 2.49 allows server-side template injection SSTI for retrieving credentials...
CVE-2024-45186
FileSender before 2.49 allows server-side template injection SSTI for retrieving credentials...
FileSender 安全漏洞
FileSender is an open source web application from FileSender that allows authenticated users to securely and easily send arbitrarily large files to other users. A security vulnerability exists in FileSender versions prior to 2.49, which stems from the presence of server-side template injection th...