CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Cvelist•added 2023/04/24 12:0 a.m.•20 views

CVE-2023-2259 Improper Neutralization of Special Elements Used in a Template Engine in alfio-event/alf.io

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304...

9.1CVSS7.2AI score0.01089EPSS

Exploits1References2

CVE•added 2023/04/24 12:0 a.m.•64 views

CVE-2023-2259

CVE-2023-2259 affects alfio-event/alf.io prior to 2.0-M4-2304. The issue is an improper neutralization of special elements used in a template engine, enabling server-side template injection. Impact is reported as high/critical in CVSS assessments (high in NVD 3.1, critical in other sources) with ...

9.1CVSS7.2AI score0.01089EPSS

Exploits1References2Affected Software1