CVE-2024-23761
9.8CRITICALServer Side Template Injection in Gambio 4.9.2.0 allows attackers to run arbitrary code via crafted smarty email template.
Publicado: 2/12/2024Atualizado: 11/21/2024
Descrição
Server Side Template Injection in Gambio 4.9.2.0 allows attackers to run arbitrary code via crafted smarty email template.
Análise IADesenvolvido por IA
Produtos Afetados
gambiogambio
4.9.2.0
Referências
- https://herolab.usd.de/security-advisories/usd-2023-0048/ExploitThird Party Advisory
- https://herolab.usd.de/security-advisories/usd-2023-0048/ExploitThird Party Advisory