CVE-2024-24230

Komm.One CMS 10.4.2.14 has a Server-Side Template Injection SSTI vulnerability via the Velocity template engine. It allows remote attackers to execute arbitrary code via a URL that specifies java.lang.Runtime in conjunction with getRuntime.exec followed by an OS command...

CVE-2024-24230

Komm.One CMS version 10.4.2.14 is susceptible to a Server-Side Template Injection (SSTI) vulnerability within the Velocity template engine . A remote attacker can exploit this by using a specially crafted URL that specifies java.lang.Runtime in combination with getRuntime().exec(), leading to arb...

CVE-2024-24230

Komm.One CMS 10.4.2.14 has a Server-Side Template Injection SSTI vulnerability via the Velocity template engine. It allows remote attackers to execute arbitrary code via a URL that specifies java.lang.Runtime in conjunction with getRuntime.exec followed by an OS command...

CVE-2024-24230: Improper Control of Generation of Code

Komm.One CMS 10.4.2.14 has a Server-Side Template Injection SSTI vulnerability via the Velocity template engine. It allows remote attackers to execute arbitrary code via a URL that specifies java.lang.Runtime in conjunction with getRuntime.exec followed by an OS command...

PT-2024-20322

Name of the Vulnerable Software and Affected Versions Komm.One CMS version 10.4.2.14 Description The issue is related to a Server-Side Template Injection SSTI vulnerability via the Velocity template engine. It allows remote attackers to execute arbitrary code via a URL that specifies...