CVE-2024-45186

The open-source web application FileSender is vulnerable to Server-Side Template Injection (SSTI) in versions prior to 2.49 . This flaw occurs within the server's template processing function, which can allow unauthorized users to retrieve critical credentials stored on the server. Over 600 insta...