2 matches found
CVE-2024-32404
Server-Side Template Injection SSTI vulnerability in inducer relate before v.2024.1, allows remote attackers to execute arbitrary code via a crafted payload to the Markup Sandbox feature...
6CVSS7.8AI score0.00797EPSS
SaveExploits0References1
CVE-2024-32404
The inducer relate courseware package is vulnerable to a Server-Side Template Injection (SSTI) vulnerability in versions prior to v.2024.1 . This flaw allows remote attackers to execute arbitrary code by sending a crafted payload to the Markup Sandbox feature. To mitigate this risk, users are rec...
6CVSS8.1AI score0.00797EPSS
SaveExploits0References1Affected Software1
20