CVE-2024-23761
9.8CRITICALServer Side Template Injection in Gambio 4.9.2.0 allows attackers to run arbitrary code via crafted smarty email template.
Publicado: 2/12/2024Actualizado: 11/21/2024
Descripción
Server Side Template Injection in Gambio 4.9.2.0 allows attackers to run arbitrary code via crafted smarty email template.
Análisis IAImpulsado por IA
Productos Afectados
gambiogambio
4.9.2.0
Referencias
- https://herolab.usd.de/security-advisories/usd-2023-0048/ExploitThird Party Advisory
- https://herolab.usd.de/security-advisories/usd-2023-0048/ExploitThird Party Advisory