CVE-2024-25413

CVE-2024-25413 describes a XSLT Server-Side Injection in the FireBear Improved Import And Export plugin, Version 3.8.6, within the Import Jobs function. An attacker can execute arbitrary commands by supplying a crafted XSLT file. The PT-2024-20928 entry confirms the affected software/versions and...