17 matches found
VMware-CVE-2022-22954
VMware CVE-2022-22954 Workspace ONE Access Freemarker 服务端模板注入 Vmware CVE-2022-22954 的 POC 使用这一行 GET 请求！！这将执行 cat /etc/passwd...
VMware-CVE-2022-22954
VMware CVE-2022-22954 Workspace ONE Access Freemarker 服务端模板注入 Vmware CVE-2022-22954 的 POC 使用这一行 GET 请求！！这将执行 cat /etc/passwd...
CVE-2025-26865
CVE-2025-26865: FreeMarker 服务器端模板注入（通过 Apache OfBiz 的 "ecommerce" 插件） 由于在 18.12.17 和 18.12.18 之间引入的回归问题，针对 CVE-2022-25813: Apache OfBiz 中的 FreeMarker 服务器端模板注入 的修复不再生效，从而重新打开了利用 "ecommerce" 插件发起 FreeMarker 服务器端模板注入（SSTI）攻击的可能性。 如果攻击成功，SSTI 可能导致远程代码执行（RCE）。 供应商披露： 该漏洞的供应商披露和修复可在此处找到：here。 要求： 此漏洞需要...
CVE-2022-22954
CVE-2022-22954 CVE-2022-22954 VMware Workspace ONE Access freemarker SSTI 多个漏洞触发点检测、多线程批量检测、命令执行、文件写入 // Single target vulnerability detection python CVE-2022-22954.py -u https://x.x.x.x // Command execution python CVE-2022-22954.py -u https://x.x.x.x -c "id" // Write file python CVE-2022-22954.p...
CVE-2026-22244 OpenMetadata Server-Side Template Injection (SSTI) in FreeMarker email templates that leads to RCE
OpenMetadata is a unified metadata platform. Versions 1.5.0 through 1.11.3 are vulnerable to remote code execution via Server-Side Template Injection SSTI in FreeMarker email templates. An attacker must have administrative privileges to exploit the vulnerability. Version 1.11.4 contains a patch...
Apache StreamPark: FreeMarker SSTI RCE Vulnerability
On versions before 2.1.4, a user could log in and perform a template injection attack resulting in Remote Code Execution on the server, The attacker must successfully log into the system to launch an attack, so this is a moderate-impact vulnerability. Mitigation: all users should upgrade to 2.1.4...
CVE-2024-29178 Apache StreamPark: FreeMarker SSTI RCE Vulnerability
On versions before 2.1.4, a user could log in and perform a template injection attack resulting in Remote Code Execution on the server, The attacker must successfully log into the system to launch an attack, so this is a moderate-impact vulnerability. Mitigation: all users should upgrade to 2.1.4...
GHSA-2JV3-V37P-65W3 CrafterCMS Crafter Studio Improperly Controls Dynamically-Managed Code Resources
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI...
CrafterCMS Crafter Studio Improperly Controls Dynamically-Managed Code Resources
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI...
CVE-2022-40634
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI...
CVE-2022-40634
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI...
Design/Logic Flaw
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI...
EUVD-2022-6664
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI...
CVE-2022-40634
CVE-2022-40634 affects Crafter CMS Crafter Studio. The vulnerability arises from improper control of dynamically-managed code resources, enabling Server-Side Template Injection via FreeMarker (SSTI). Exploitation requires authenticated user credentials and can lead to OS command execution, as des...
CVE-2022-40634 Improper Control of Dynamically-Managed Code Resources in Crafter Studio
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI...
CVE-2022-40634: Improper Control of Dynamically-Managed Code Resources
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI...
