CWE-1336 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-1336/ Sun, 26 Feb 2023 06:48:35 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-1336 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-1336/ 32 32 CVE-2018-20465 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-20465/ Sun, 26 Feb 2023 06:48:35 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-20465/ Craft CMS through 3.0.34 allows remote authenticated administrators to read sensitive information via server-side template injection, as demonstrated by a {% string for craft.app.config.DB.user and craft.app.config.DB.password in the URI Format of the Site Settings, which causes a cleartext username and password to be displayed in a URI field.

The post CVE-2018-20465 appeared first on CVE Vulnerability.

]]> Craft CMS through 3.0.34 allows remote authenticated administrators to read sensitive information via server-side template injection, as demonstrated by a {% string for craft.app.config.DB.user and craft.app.config.DB.password in the URI Format of the Site Settings, which causes a cleartext username and password to be displayed in a URI field.

The post CVE-2018-20465 appeared first on CVE Vulnerability.

]]> CVE-2020-9437 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-9437/ Sun, 26 Feb 2023 06:43:45 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-9437/ SecureAuth.aspx in SecureAuth IdP 9.3.0 suffers from a client-side template injection that allows for script execution, in the same manner as XSS.

The post CVE-2020-9437 appeared first on CVE Vulnerability.

]]> SecureAuth.aspx in SecureAuth IdP 9.3.0 suffers from a client-side template injection that allows for script execution, in the same manner as XSS.

The post CVE-2020-9437 appeared first on CVE Vulnerability.

]]> CVE-2020-4027 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-4027/ Sun, 26 Feb 2023 06:41:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-4027/ Affected versions of Atlassian Confluence Server and Data Center allowed remote attackers with system administration permissions to bypass velocity template injection mitigations via an injection vulnerability in custom user macros. The affected versions are before version 7.4.5, and from version 7.5.0 before 7.5.1.

The post CVE-2020-4027 appeared first on CVE Vulnerability.

]]> Affected versions of Atlassian Confluence Server and Data Center allowed remote attackers with system administration permissions to bypass velocity template injection mitigations via an injection vulnerability in custom user macros. The affected versions are before version 7.4.5, and from version 7.5.0 before 7.5.1.

The post CVE-2020-4027 appeared first on CVE Vulnerability.

]]> CVE-2020-26282 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-26282/ Sun, 26 Feb 2023 06:39:59 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-26282/ BrowserUp Proxy allows you to manipulate HTTP requests and responses, capture HTTP content, and export performance data as a HAR file. BrowserUp Proxy works well as a standalone proxy server, but it is especially useful when embedded in Selenium tests. A Server-Side Template Injection was identified in BrowserUp Proxy enabling attackers to inject arbitrary Java […]

The post CVE-2020-26282 appeared first on CVE Vulnerability.

]]> BrowserUp Proxy allows you to manipulate HTTP requests and responses, capture HTTP content, and export performance data as a HAR file. BrowserUp Proxy works well as a standalone proxy server, but it is especially useful when embedded in Selenium tests. A Server-Side Template Injection was identified in BrowserUp Proxy enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code Execution (RCE) vulnerability. This has been patched in version 2.1.2.

The post CVE-2020-26282 appeared first on CVE Vulnerability.

]]> CVE-2020-1961 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-1961/ Sun, 26 Feb 2023 06:38:46 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-1961/ Vulnerability to Server-Side Template Injection on Mail templates for Apache Syncope 2.0.X releases prior to 2.0.15, 2.1.X releases prior to 2.1.6, enabling attackers to inject arbitrary JEXL expressions, leading to Remote Code Execution (RCE) was discovered.

The post CVE-2020-1961 appeared first on CVE Vulnerability.

]]> Vulnerability to Server-Side Template Injection on Mail templates for Apache Syncope 2.0.X releases prior to 2.0.15, 2.1.X releases prior to 2.1.6, enabling attackers to inject arbitrary JEXL expressions, leading to Remote Code Execution (RCE) was discovered.

The post CVE-2020-1961 appeared first on CVE Vulnerability.

]]> CVE-2020-12790 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-12790/ Sun, 26 Feb 2023 06:36:42 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-12790/ In the SEOmatic plugin before 3.2.49 for Craft CMS, helpers/DynamicMeta.php does not properly sanitize the URL. This leads to Server-Side Template Injection and credentials disclosure via a crafted Twig template after a semicolon.

The post CVE-2020-12790 appeared first on CVE Vulnerability.

]]> In the SEOmatic plugin before 3.2.49 for Craft CMS, helpers/DynamicMeta.php does not properly sanitize the URL. This leads to Server-Side Template Injection and credentials disclosure via a crafted Twig template after a semicolon.

The post CVE-2020-12790 appeared first on CVE Vulnerability.

]]> CVE-2019-19999 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19999/ Sun, 26 Feb 2023 06:32:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19999/ Halo before 1.2.0-beta.1 allows Server Side Template Injection (SSTI) because TemplateClassResolver.SAFER_RESOLVER is not used in the FreeMarker configuration.

The post CVE-2019-19999 appeared first on CVE Vulnerability.

]]> Halo before 1.2.0-beta.1 allows Server Side Template Injection (SSTI) because TemplateClassResolver.SAFER_RESOLVER is not used in the FreeMarker configuration.

The post CVE-2019-19999 appeared first on CVE Vulnerability.

]]> CVE-2021-4315 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-4315/ Thu, 23 Feb 2023 14:12:24 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-4315/ A vulnerability has been found in NYUCCL psiTurk up to 3.2.0 and classified as critical. This vulnerability affects unknown code of the file psiturk/experiment.py. The manipulation of the argument mode leads to improper neutralization of special elements used in a template engine. The exploit has been disclosed to the public and may be used. Upgrading […]

The post CVE-2021-4315 appeared first on CVE Vulnerability.

]]> A vulnerability has been found in NYUCCL psiTurk up to 3.2.0 and classified as critical. This vulnerability affects unknown code of the file psiturk/experiment.py. The manipulation of the argument mode leads to improper neutralization of special elements used in a template engine. The exploit has been disclosed to the public and may be used. Upgrading to version 3.2.1 is able to address this issue. The name of the patch is 47787e15cecd66f2aa87687bf852ae0194a4335f. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-219676.

The post CVE-2021-4315 appeared first on CVE Vulnerability.

]]> CVE-2021-21244 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-21244/ Thu, 23 Feb 2023 14:06:58 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-21244/ OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, There is a vulnerability that enabled pre-auth server side template injection via Bean validation message tampering. Full details in the reference GHSA. This issue was fixed in 4.0.3 by disabling validation interpolation completely.

The post CVE-2021-21244 appeared first on CVE Vulnerability.

]]> OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, There is a vulnerability that enabled pre-auth server side template injection via Bean validation message tampering. Full details in the reference GHSA. This issue was fixed in 4.0.3 by disabling validation interpolation completely.

The post CVE-2021-21244 appeared first on CVE Vulnerability.

]]> CVE-2022-27662 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-27662/ Thu, 23 Feb 2023 05:18:06 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-27662/ On F5 Traffix SDC 5.2.x versions prior to 5.2.2 and 5.1.x versions prior to 5.1.35, a stored Cross-Site Template Injection vulnerability exists in an undisclosed page of the Traffix SDC Configuration utility that allows an attacker to execute template language-specific instructions in the context of the server. Note: Software versions which have reached End of […]

The post CVE-2022-27662 appeared first on CVE Vulnerability.

]]> On F5 Traffix SDC 5.2.x versions prior to 5.2.2 and 5.1.x versions prior to 5.1.35, a stored Cross-Site Template Injection vulnerability exists in an undisclosed page of the Traffix SDC Configuration utility that allows an attacker to execute template language-specific instructions in the context of the server. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

The post CVE-2022-27662 appeared first on CVE Vulnerability.

]]>