Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 10:20 a.m.•10 views

CVE-2024-32406

Server-Side Template Injection SSTI vulnerability in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload to the Batch-Issue Exam Tickets function...

7.5CVSS8.1AI score0.01109EPSS
SaveExploits1References1
NVD
NVD
•added 2024/04/26 4:15 a.m.•27 views

CVE-2024-32406

Server-Side Template Injection SSTI vulnerability in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload to the Batch-Issue Exam Tickets function...

7.5CVSS7.7AI score0.01109EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/04/26 12:00 a.m.•34 views

CVE-2024-32406

Server-Side Template Injection SSTI vulnerability in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload to the Batch-Issue Exam Tickets function...

8AI score0.01109EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/26 12:00 a.m.•2 views

CVE-2024-32406: Improper Neutralization of Special Elements Used in a Template Engine

Server-Side Template Injection SSTI vulnerability in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload to the Batch-Issue Exam Tickets function...

7.5CVSS6.6AI score0.01109EPSS
SaveExploits1References2
CVE
CVE
•added 2024/04/26 12:00 a.m.•73 views

CVE-2024-32406

A Server-Side Template Injection (SSTI) vulnerability exists in inducer relate (and relate ) versions prior to v.2024.1 . The flaw is located within the Batch-Issue Exam Tickets function, where a remote attacker can execute arbitrary code by sending a crafted payload. Successful exploitation may ...

7.5CVSS8AI score0.01109EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder