#cwe-1336

共收录 172 条相关情报。

← 返回所有主题

漏洞预警2026-08-25 发布INFO

The Grav Email plugin (getgrav/grav-plugin-email) before 4.2.2 renders page-editor-controlled Email action parameters as unsandboxed Twig templates. An authenticated remote user...

CVE-2026-75574

The Grav Email plugin (getgrav/grav-plugin-email) before 4.2.2 renders page-editor-controlled Email action parameters as

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-23 发布INFO

A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateContro...

CVE-2026-78140

A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/ja

历史摘要 · 未重新核验 · NVD

#cve #cwe-791 #cwe-1336

漏洞预警2026-08-21 发布INFO

Phalcon is a high-performance, full-stack PHP framework. In 5.15.0 and earlier, resolveFilter in phalcon/Mvc/View/Engine/Volt/Compiler.zep builds the join filter by inserting th...

CVE-2026-59989

Phalcon is a high-performance, full-stack PHP framework. In 5.15.0 and earlier, resolveFilter in phalcon/Mvc/View/Engine

历史摘要 · 未重新核验 · NVD

#cve #cwe-94 #cwe-1336

安全公告2026-08-21 发布INFO

Phalcon Volt compiler `join` filter compile-time PHP code injection (SSTI leads to RCE)

CVE-2026-59989

## Summary The Volt template compiler in Phalcon generates the PHP for the `join` filter by string-concatenating the fi

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #composer #cwe-94 #cwe-1336 #severity:critical

安全公告2026-08-19 发布INFO

Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes)

CVE-2026-53964

### Impact A remote code execution (RCE) via server-side template injection (SSTI) allows for user supplied code to be e

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-1336 #severity:high

漏洞预警2026-08-19 发布INFO

Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, a ${...} expression or backtick in a schema default is...

CVE-2026-72717

Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.

历史摘要 · 未重新核验 · NVD

#cve #cwe-94 #cwe-116 #cwe-1336

漏洞预警2026-08-19 发布INFO

Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, a ${...} expression or backtick in a query parameter d...

CVE-2026-72716

Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, a ${...} expression or backtick in a header parameter ...

CVE-2026-71871

Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.

历史摘要 · 未重新核验 · NVD

#cve #cwe-94 #cwe-116 #cwe-1336

漏洞预警2026-08-19 发布INFO

Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, a ${...} expression or backtick in an array item defau...

CVE-2026-71869

Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.

历史摘要 · 未重新核验 · NVD

#cve #cwe-94 #cwe-116 #cwe-1336

漏洞预警2026-08-19 发布INFO

Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, a ${...} expression or backtick in an enum default is ...

CVE-2026-71868

Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.

历史摘要 · 未重新核验 · NVD

#cve #cwe-94 #cwe-1336

漏洞预警2026-08-19 发布INFO

Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, an unescaped backtick in servers[0].url is emitted int...

CVE-2026-62682

Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.

历史摘要 · 未重新核验 · NVD

#cve #cwe-94 #cwe-116 #cwe-1336

漏洞预警2026-08-19 发布INFO

Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, an unescaped backtick in an OpenAPI path is emitted in...

CVE-2026-62681

Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.

历史摘要 · 未重新核验 · NVD

#cve #cwe-94 #cwe-116 #cwe-1336

漏洞预警2026-08-19 发布INFO

Formie is a Craft CMS plugin for creating forms. Prior to 3.1.27, Formie can pass request-derived Hidden field defaults such as HTTP User Agent, Referer URL, Current URL, Curren...

CVE-2026-52889

Formie is a Craft CMS plugin for creating forms. Prior to 3.1.27, Formie can pass request-derived Hidden field defaults

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Unauthenticated Remote Code Execution (RCE) in JetEngine <= 3.8.14 versions.

CVE-2026-66613

Unauthenticated Remote Code Execution (RCE) in JetEngine <= 3.8.14 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布MEDIUM

A vulnerability was found in xianrendzw EasyReport up to 2.0.17.0522_Beta. Affected is the function execSqlText/previewSqlText of the file DesignerController.java of the compone...

CVE-2026-75979

CVE-2026-75979 是 xianrendzw EasyReport 组件中发现的一个安全漏洞，影响版本至 2.0.17.0522_Beta。漏洞位于 DesignerController.java 文件的 execSqlText/

历史摘要 · 未重新核验 · NVD

#cve #cwe-791 #cwe-1336

漏洞预警2026-08-18 发布INFO

Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to access server-side file...

CVE-2026-71880

Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

grav-plugin-api versions before 1.0.15 fail to validate Twig content in the translate() endpoint, allowing attackers with api.pages.write permission to persist pages with proces...

CVE-2026-75829

grav-plugin-api versions before 1.0.15 fail to validate Twig content in the translate() endpoint, allowing attackers wit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-17 发布INFO

ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, limited authenticated users can cross a permission boundary in Frappe safe ex...

CVE-2026-65974

ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, limited authenticate

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-17 发布INFO

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17, an authenticated administrator with Applet Host management an...

CVE-2026-44845

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17, an a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-16 发布INFO

A vulnerability was identified in OpenBoxes up to 0.9.6. This impacts the function buildZebraTemplate of the file grails-app/controllers/org/pih/warehouse/core/DocumentControlle...

CVE-2026-19929

A vulnerability was identified in OpenBoxes up to 0.9.6. This impacts the function buildZebraTemplate of the file grails

历史摘要 · 未重新核验 · NVD

#cve #cwe-791 #cwe-1336