3 matches found
EUVD-2016-5451
Malware in sbrugna...
8.8CVSS8.8AI score0.03802EPSS
SaveExploits0References2
Remote code execution
By manipulating the URL parameter externalLoginKey, a malicious, logged in user could pass valid Freemarker directives to the Template Engine that are reflected on the webpage; a specially crafted Freemarker template could be used for remote code execution. Mitigation: Upgrade to Apache OFBiz...
6.5CVSS7.8AI score0.03802EPSS
SaveExploits0References1Affected Software1
CVE-2016-4462
By manipulating the URL parameter externalLoginKey, a malicious, logged in user could pass valid Freemarker directives to the Template Engine that are reflected on the webpage; a specially crafted Freemarker template could be used for remote code execution. Mitigation: Upgrade to Apache OFBiz...
8.8CVSS6AI score0.03802EPSS
SaveExploits0References1
20