Lucene search
+L

2 matches found

OSV
OSV
added 2021/11/10 4:41 p.m.32 views

GHSA-3V56-Q6R6-4GCW Insecure Inherited Permissions in neoan3-apps/template

Impact Versions prior 1.1.1 have allowed for passing in closures directly into the template engine. As a result values that are callable are executed by the template engine. The issue arises if a value has the same name as a method or function in scope and can therefore be executed either by...

7.5CVSS9.4AI score0.01532EPSS
SaveExploits0References5
Rows per page
Query Builder