CVE-2024-23761
9.8CRITICALServer Side Template Injection in Gambio 4.9.2.0 allows attackers to run arbitrary code via crafted smarty email template.
Published: 2/12/2024Updated: 11/21/2024
Description
Server Side Template Injection in Gambio 4.9.2.0 allows attackers to run arbitrary code via crafted smarty email template.
AI AnalysisPowered by AI
Affected Products
gambiogambio
4.9.2.0
References
- https://herolab.usd.de/security-advisories/usd-2023-0048/ExploitThird Party Advisory
- https://herolab.usd.de/security-advisories/usd-2023-0048/ExploitThird Party Advisory