CVE-2020-11994

Server-Side Template Injection and arbitrary file disclosure on Camel templating components...

CVE-2020-11994

CVE-2020-11994 is a Server-Side Template Injection in the Apache Camel templating component used by Oracle Enterprise Manager Cloud Control Base Platform (13.4.0.0), specifically in the Reporting Framework. The vulnerability enables arbitrary file disclosure and high-impact data exposure due to C...

CVE-2020-11994

Server-Side Template Injection and arbitrary file disclosure on Camel templating components...

PT-2020-5482

Name of the Vulnerable Software and Affected Versions Apache Camel affected versions not specified Description The issue is related to Server-Side Template Injection and arbitrary file disclosure on Camel templating components. It is caused by insufficient cleaning of special elements in the outp...

CVE-2020-11994: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Server-Side Template Injection and arbitrary file disclosure on Camel templating components...

Server Side Template Injection Payloads

Server-side template injection is when an attacker is able to use native template syntax to inject a malicious payload into a template, which is then executed server-side. Template engines are designed to generate web pages by combining fixed templates with volatile data. Server-side template...

CVE-2020-14172

CVE-2020-14172 concerns Atlassian Jira Server/Data Center vulnerability where insecure deserialization via server-side Velocity templates enabled remote code execution. The affected versions are Jira Server/Data Center before 7.13.0, 8.0.x before 8.5.0, and 8.6.x before 8.8.1. The issue is addres...

CVE-2020-14172: Deserialization of Untrusted Data

This issue exists to document that a security improvement in the way that Jira Server and Data Center use velocity templates has been implemented. The way in which velocity templates were used in Atlassian Jira Server and Data Center in affected versions allowed remote attackers to achieve remote...

Design/Logic Flaw

The way in which velocity templates were used in Atlassian Jira Server and Data Center prior to version 8.8.0 allowed remote attackers to gain remote code execution if they were able to exploit a server side template injection vulnerability...

CVE-2019-20409

The way in which velocity templates were used in Atlassian Jira Server and Data Center prior to version 8.8.0 allowed remote attackers to gain remote code execution if they were able to exploit a server side template injection vulnerability...

PT-2020-10426

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 8.8.0 Description The issue allows remote attackers to gain remote code execution if they can exploit a server-side template injection vulnerability related to the use of velocity...

CVE-2019-20409: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The way in which velocity templates were used in Atlassian Jira Server and Data Center prior to version 8.8.0 allowed remote attackers to gain remote code execution if they were able to exploit a server side template injection vulnerability...

Node.js third-party modules: Server-side Template Injection in lodash.js

I would like to report Server-side Template Injection in lodash.js .template function It allows the execution of code on the server Module module name: lodash version: 4.17.15 npm page: https://www.npmjs.com/package/lodash Module Description The Lodash library exported as Node.js modules. Module...

vulhub

It is an open-source collection of pre-built vulnerable docker environments. The repository contains a variety of vulnerable environments, including Flask SSTI, Apache Parsing Vulnerability, and more. The target product/service or framework is not explicitly stated, but the environments are...

Server-Side Template Injection

conductor-core is vulnerable to server-side template injection. The vulnerability exists as it was using hibernate-validator in a custom constraint validator, where user-input that were not properly validated against a validation mapping configuration can reach the error message template, allowin...

CVE-2020-12790

In the SEOmatic plugin before 3.2.49 for Craft CMS, helpers/DynamicMeta.php does not properly sanitize the URL. This leads to Server-Side Template Injection and credentials disclosure via a crafted Twig template after a semicolon...

CVE-2020-12790

In the SEOmatic plugin before 3.2.49 for Craft CMS, helpers/DynamicMeta.php does not properly sanitize the URL. This leads to Server-Side Template Injection and credentials disclosure via a crafted Twig template after a semicolon...

Design/Logic Flaw

In the SEOmatic plugin before 3.2.49 for Craft CMS, helpers/DynamicMeta.php does not properly sanitize the URL. This leads to Server-Side Template Injection and credentials disclosure via a crafted Twig template after a semicolon...

CVE-2020-12790

The CVE-2020-12790 entry concerns the SEOmatic plugin for Craft CMS before version 3.2.49. The root cause is improper sanitization in helpers/DynamicMeta.php for URL handling, which can allow Server-Side Template Injection and credentials disclosure via a crafted Twig template after a semicolon. ...

CVE-2020-12790

In the SEOmatic plugin before 3.2.49 for Craft CMS, helpers/DynamicMeta.php does not properly sanitize the URL. This leads to Server-Side Template Injection and credentials disclosure via a crafted Twig template after a semicolon...