Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/02 12:00 a.m.•1 views

CVE-2025-54287: Improper Neutralization of Special Elements Used in a Template Engine

Template Injection in instance snapshot creation component in Canonical LXD = 4.0 allows an attacker with instance configuration permissions to read arbitrary files on the host system via specially crafted snapshot pattern templates using the Pongo2 template engine...

7.1CVSS5.9AI score0.00367EPSS
SaveExploits1References1
Rows per page
Query Builder