CVE-2026-21450
Bagisto has SSTI in parameter that can lead to RCE
概要
Bagisto has SSTI in parameter that can lead to RCE
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Bagisto is an open source laravel eCommerce platform. Versions prior to 2.3.10 are vulnerable to server-side template injection via type parameter, which can lead to remote code execution or another exploitation. Version 2.3.10 fixes the issue.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov