PT-2021-20915
CVE-2021-35450
·
تاريخ النشر
2021-08-02
·
تاريخ التحديث
2021-08-10
الوصف من
CVSS 2.0
9.0
عاليةالمقاييسAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
Entando Admin Console versions 6.3.9 and earlier
Description:
A Server Side Template Injection in the Entando Admin Console allows a user with privileges to execute FreeMarker template with command execution via
freemarker.template.utility.Execute.Recommendations:
For Entando Admin Console versions 6.3.9 and earlier, as a temporary workaround, consider disabling the
freemarker.template.utility.Execute function until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾