CVE-2024-36694

The shopping cart system OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection (SSTI) . The root cause is the improper validation and sanitization of user inputs within the Theme Editor Function , specifically affecting the Save function in admin/controller/design/template.php. This fl...

CVE-2024-36694

OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection SSTI via the Theme Editor Function...

CVE-2024-36694

OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection SSTI via the Theme Editor Function...

Server-side Template Injection (SSTI)

SiYuan is vulnerable to Server-Side Template Injection SSTI. The vulnerability is due to improper handling of templates in the /api/template/renderSprig endpoint, allowing attackers to access environment variables through the Sprig template engine...

CVE-2024-56085

An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while creating Search Template Dashboard. These are executed, leading to Server-Side Template Injection...

CVE-2024-56087

An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while querying Search Template Dashboard. These are executed, leading to Server-Side Template Injection...

CVE-2024-56085

Versions of Logpoint prior to 7.5.0 are susceptible to a Server-Side Template Injection (SSTI) vulnerability. The root cause is the improper neutralization of special elements, allowing authenticated users to inject and execute malicious payloads during the creation of a Search Template Dashboard...

CVE-2024-56087

An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while querying Search Template Dashboard. These are executed, leading to Server-Side Template Injection...

CVE-2024-56085

An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while creating Search Template Dashboard. These are executed, leading to Server-Side Template Injection...

CVE-2024-56085

An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while creating Search Template Dashboard. These are executed, leading to Server-Side Template Injection...

CVE-2024-56087: Improper Neutralization of Special Elements used in a Command

An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while querying Search Template Dashboard. These are executed, leading to Server-Side Template Injection...

CVE-2024-56087

An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while querying Search Template Dashboard. These are executed, leading to Server-Side Template Injection...

CVE-2024-56087

A Server-Side Template Injection (SSTI) vulnerability exists in Logpoint versions prior to 7.5.0 . Authenticated users can inject and execute malicious payloads while querying the Search Template Dashboard . To remediate this issue, users should update to version 7.5.0 or later. A temporary worka...

CVE-2024-56085: Improper Neutralization of Special Elements used in a Command

An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads while creating Search Template Dashboard. These are executed, leading to Server-Side Template Injection...

PT-2024-36712

Name of the Vulnerable Software and Affected Versions Logpoint versions prior to 7.5.0 Description A problem was discovered in Logpoint where authenticated users can inject payloads while creating the Search Template Dashboard. These payloads are executed, leading to Server-Side Template Injectio...

CVE-2024-55660

SiYuan is a personal knowledge management system. Prior to version 3.1.16, SiYuan's /api/template/renderSprig endpoint is vulnerable to Server-Side Template Injection SSTI through the Sprig template engine. Although the engine has limitations, it allows attackers to access environment variables...

CVE-2024-55660 SiYuan has an SSTI via /api/template/renderSprig

SiYuan is a personal knowledge management system. Prior to version 3.1.16, SiYuan's /api/template/renderSprig endpoint is vulnerable to Server-Side Template Injection SSTI through the Sprig template engine. Although the engine has limitations, it allows attackers to access environment variables...

CVE-2024-55660 SiYuan has an SSTI via /api/template/renderSprig

SiYuan is a personal knowledge management system. Prior to version 3.1.16, SiYuan's /api/template/renderSprig endpoint is vulnerable to Server-Side Template Injection SSTI through the Sprig template engine. Although the engine has limitations, it allows attackers to access environment variables...

CVE-2024-55660

SiYuan (personal knowledge management system) has a confirmed SSTI vulnerability in the /api/template/renderSprig endpoint affecting versions prior to 3.1.16. The issue arises from the Sprig template engine and enables access to environment variables. Version 3.1.16 contains the patch. Connected ...

CVE-2024-55660 SiYuan has an SSTI via /api/template/renderSprig

SiYuan is a personal knowledge management system. Prior to version 3.1.16, SiYuan's /api/template/renderSprig endpoint is vulnerable to Server-Side Template Injection SSTI through the Sprig template engine. Although the engine has limitations, it allows attackers to access environment variables...