PT-2024-24549 · Inducer · Inducer

Name of the Vulnerable Software and Affected Versions: inducer relate versions prior to 2024.1 Description: The issue is related to a Server-Side Template Injection SSTI vulnerability, which allows remote attackers to execute arbitrary code via a crafted payload to the Markup Sandbox feature...

PT-2024-24552 · Inducer · Inducer

Name of the Vulnerable Software and Affected Versions: inducer versions prior to 2024.1 Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the Page Sandbox feature. Recommendations: For versions prior to 2024.1, update to version 2024.1 or later to...