Lucene search
+L

2 matches found

OSV
OSV
added 2022/10/29 12:29 a.m.21 views

GHSA-5QXQ-VGMM-Q39M RCE vulnerability in Pimcore/Mail & Dynamic Text Layout

Impact The user controlled twig templates rendering in Pimcore/Mail & ClassDefinition\Layout\Text is vulnerable to server-side template Injection RCE. Patches Update to version 10.5.9 or apply this patch manually https://github.com/pimcore/pimcore/pull/13347.patch Workarounds Apply...

9.8CVSS9.6AI score0.01655EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/10/29 12:29 a.m.56 views

RCE vulnerability in Pimcore/Mail & Dynamic Text Layout

Impact The user controlled twig templates rendering in Pimcore/Mail & ClassDefinition\Layout\Text is vulnerable to server-side template Injection RCE. Patches Update to version 10.5.9 or apply this patch manually https://github.com/pimcore/pimcore/pull/13347.patch Workarounds Apply...

9.8CVSS9.3AI score0.01655EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder