2 matches found
CVE-2025-54287: Improper Neutralization of Special Elements Used in a Template Engine
Template Injection in instance snapshot creation component in Canonical LXD = 4.0 allows an attacker with instance configuration permissions to read arbitrary files on the host system via specially crafted snapshot pattern templates using the Pongo2 template engine...
7.1CVSS5.9AI score0.00367EPSS
SaveExploits1References1
20