CVE-2024-24230

Komm.One CMS 10.4.2.14 has a Server-Side Template Injection SSTI vulnerability via the Velocity template engine. It allows remote attackers to execute arbitrary code via a URL that specifies java.lang.Runtime in conjunction with getRuntime.exec followed by an OS command...

CVE-2024-24230

Komm.One CMS 10.4.2.14 has a Server-Side Template Injection SSTI vulnerability via the Velocity template engine. It allows remote attackers to execute arbitrary code via a URL that specifies java.lang.Runtime in conjunction with getRuntime.exec followed by an OS command...

CVE-2024-24230

Komm.One CMS version 10.4.2.14 is susceptible to a Server-Side Template Injection (SSTI) vulnerability within the Velocity template engine . A remote attacker can exploit this by using a specially crafted URL that specifies java.lang.Runtime in combination with getRuntime().exec(), leading to arb...