CVE-2022-39365
RCE vulnerability in Pimcore/Mail & Dynamic Text Layout
Résumé
RCE vulnerability in Pimcore/Mail & Dynamic Text Layout
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Pimcore is an open source data and experience management platform. Prior to version 10.5.9, the user controlled twig templates rendering in Pimcore/Mail & ClassDefinition\Layout\Text is vulnerable to server-side template injection, which could lead to remote code execution. Version 10.5.9 contains a patch for this issue. As a workaround, one may apply the patch manually.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- patch github.com