共收录 172 条相关情报。
← 返回所有主题CVE-2025-40900
An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an
CVE-2026-29207
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz. This issue affects
CVE-2026-45697
### Impact - Unauthenticated users could submit crafted values into Hidden fields (with Default value → Custom) that wer
CVE-2026-45714
CubeCart is an ecommerce software solution. Prior to 6.7.0, an Authenticated Server-Side Template Injection (SSTI) vulne
CVE-2026-44377
CubeCart is an ecommerce software solution. Prior to 6.7.0, an Authenticated Server-Side Template Injection (SSTI) vulne
CVE-2026-41901
Thymeleaf is a server-side Java template engine for web and standalone environments. Prior to 3.1.5.RELEASE, a security
CVE-2026-44209
## Summary `banks /tmp/rce_banks_exec').read() }}") p.text() ``` ```bash ls -l /tmp/rce_banks_exec # -rw-rw-r-- 1 ak a
CVE-2026-44129
SEPPmail Secure Email Gateway before version 15.0.4 contains a server-side template injection vulnerability in the new G
CVE-2026-44916
In OpenStack Ironic through 35.x, instance_info['ks_template'] is rendered without sandboxing.
CVE-2026-42203
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.80.5 to before vers
# Summary **Description** An Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) vulnerab
CVE-2026-41901
### Impact A security bypass vulnerability exists in the expression execution mechanisms of Thymeleaf up to and includi