CVE-2024-45186

FileSender before 2.49 allows server-side template injection SSTI for retrieving credentials...

CVE-2024-45186

FileSender before 2.49 allows server-side template injection SSTI for retrieving credentials...

CVE-2024-45186

FileSender before 2.49 allows server-side template injection SSTI for retrieving credentials...

FileSender 安全漏洞

FileSender is an open source web application from FileSender that allows authenticated users to securely and easily send arbitrarily large files to other users. A security vulnerability exists in FileSender versions prior to 2.49, which stems from the presence of server-side template injection th...

CVE-2024-45186

CVE-2024-45186 affects FileSender prior to 2.49. The issue is a server‑side template injection (SSTI) in the template processing function, enabling retrieval of credentials. Affected component is the server’s template handling within FileSender; root cause is unsafely processed templates allowing...

CVE-2024-45186

FileSender before 2.49 allows server-side template injection SSTI for retrieving credentials...