Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 10:20 a.m.4 views

CVE-2024-32404

Server-Side Template Injection SSTI vulnerability in inducer relate before v.2024.1, allows remote attackers to execute arbitrary code via a crafted payload to the Markup Sandbox feature...

6CVSS8.2AI score0.00941EPSS
Exploits0References1
NVD
NVD
added 2024/04/26 4:15 a.m.10 views

CVE-2024-32404

Server-Side Template Injection SSTI vulnerability in inducer relate before v.2024.1, allows remote attackers to execute arbitrary code via a crafted payload to the Markup Sandbox feature...

6CVSS7.8AI score0.00941EPSS
Exploits0References1
OSV
OSV
added 2024/04/26 4:15 a.m.1 views

CVE-2024-32404

Server-Side Template Injection SSTI vulnerability in inducer relate before v.2024.1, allows remote attackers to execute arbitrary code via a crafted payload to the Markup Sandbox feature...

6CVSS6.1AI score0.00941EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/26 12:0 a.m.8 views

CVE-2024-32404

Server-Side Template Injection SSTI vulnerability in inducer relate before v.2024.1, allows remote attackers to execute arbitrary code via a crafted payload to the Markup Sandbox feature...

8.2AI score0.00941EPSS
Exploits0References1
CVE
CVE
added 2024/04/26 12:0 a.m.48 views

CVE-2024-32404

CVE-2024-32404 affects inducer relate versions prior to 2024.1. The vulnerability is a Server-Side Template Injection (SSTI) in the Markup Sandbox feature that could allow remote attackers to execute arbitrary code. Connected sources confirm the issue and reference remediation guidance, notably t...

6CVSS8.1AI score0.00941EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/04/26 12:0 a.m.11 views

CVE-2024-32404

Server-Side Template Injection SSTI vulnerability in inducer relate before v.2024.1, allows remote attackers to execute arbitrary code via a crafted payload to the Markup Sandbox feature...

8.1AI score0.00941EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/04/26 12:0 a.m.3 views

PT-2024-24549 · Inducer · Inducer

Name of the Vulnerable Software and Affected Versions: inducer relate versions prior to 2024.1 Description: The issue is related to a Server-Side Template Injection SSTI vulnerability, which allows remote attackers to execute arbitrary code via a crafted payload to the Markup Sandbox feature...

6CVSS8.5AI score0.00941EPSS
Exploits0References3
Packet Storm
Packet Storm
added 2024/04/19 12:0 a.m.180 views

Relate Learning And Teaching System SSTI / Remote Code Execution

Exploit Title: Relate Learning And Teaching system Version before 2024.1 SSTIMarkup Sandbox function lead to RCE Date: 19/04/2024 Exploit Author: kai6u Vendor Homepage: https://github.com/inducer/ Software Link: https://github.com/inducer/relate Affected Version:before 2024.1...

7.4AI score
Exploits0
Rows per page
Query Builder