Copier's safe template has arbitrary filesystem read/write access

Impact Copier's current security model shall restrict filesystem access through Jinja: - Files can only be read using % include ... %, which is limited by Jinja to reading files from the subtree of the local template clone in our case. - Files are written in the destination directory according to...

CVE-2025-4613 Client side RCE in Google Web Designer App

Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows allows attacker to achieve remote code execution by tricking users into downloading a malicious ad template...

CVE-2019-15952

An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the Pages privilege can conduct a path traversal attack ../ to include .html files that are outside the permitted directory. Also, if a page contains a template directive, then the directive will be server side processed...

CVE-2024-55652

CVE-2024-55652 affects PenDoc (also referenced as PwnDoc) where, prior to a particular commit, an attacker able to control a DOCX template could inject expressions that escape the JavaScript sandbox and execute arbitrary code on the host. The root cause is a template processing flaw that allowed ...

iniNet Solutions SpiderControl SCADA PC HMI Editor 路径遍历漏洞

iniNet Solutions SpiderControl SCADA PC HMI Editor is an HMI editor from iniNet Solutions. A path traversal vulnerability exists in iniNet Solutions SpiderControl SCADA PC HMI Editor, which stems from the fact that when it loads a malicious ems project template file, an attacker can write the fil...

Embedthis Software GoAhead 安全漏洞

Embedthis Software GoAhead is a small open source embedded web server from Embedthis Software. A security vulnerability exists in Embedthis Software GoAhead 6.0.0 and earlier versions, which stems from a null pointer dereference vulnerability in the valexpr function that allows a remote attacker ...

Minder 安全漏洞

Minder is an open source platform that helps development teams and the open source community build more secure software and prove to others that the software they build is secure. A security vulnerability exists in versions of Minder prior to 0.0.50 that stems from a maliciously created template...

PT-2023-29430 · Xwiki · Xwiki Platform +2

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 3.1-milestone-1 through 13.4-rc-1 org.xwiki.platform:xwiki-platform-web-templates versions prior to 14.10.2 and 15.5-rc-1 org.xwiki.platform:xwiki-web-standard versions 2.4-milestone-2 through 3.1-milestone-1...

CVE-2020-11013

A flaw was found in helm. The helm template lookup function bypasses the intended security property that the running helm template will not attach to a helm cluster. This flaw allows a malicious template to disclose facts about the cluster without the administrator's consent. Mitigation Three...

Denial Of Service (DoS)

Addressable is vulnerable to Denial Of Service DoS attacks. A maliciously crafted template may result in uncontrolled resource consumption, leading to denial of service conditions when matched against a URI...

Prototype Pollution

handlebars is vulnerable to prototype pollution. A remote attacker is able to add or modify properties to the Object prototype using a malicious template, potentially allowing execution of arbitrary code...

Apache NiFi Java Deserialization Vulnerability

Apache NiFi is a data-flow based data processing and distribution system of the Apache Apache Software Foundation, USA. The system supports the configuration and transformation of data routing indicator maps and system intermediary logic. A security vulnerability exists in Apache NiFi versions...

CVE-2017-12623

An authorized user could upload a template which contained malicious code and accessed sensitive files via an XML External Entity XXE attack. The fix to properly handle XML External Entities was applied on the Apache NiFi 1.4.0 release. Users running a prior 1.x release should upgrade to the...

python-django-horizon: XSS in Heat stack creation

A cross-site scripting XSS flaw was found in the Horizon orchestration dashboard. An attacker able to trick a Horizon user into using a malicious template during the stack creation could use this flaw to perform an XSS attack on that user...

PHPSysInfo 2.0/2.1 - 'index.php' File Disclosure

source: https://www.securityfocus.com/bid/7275/info PHPSysInfo has been reported to be vulnerable to a file disclosure issue. Local users may be capable of influencing the include path for several PHPSysinfo template files. If the malicious template file is symlinked to a web server readable file...