PT-2024-35267
CVE-2024-52427
·
تاريخ النشر
2024-11-18
·
تاريخ التحديث
2024-11-20
الوصف من
CVSS 3.1
9.9
حرجةالمقاييسAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Event Tickets with Ticket Scanner versions 2.3.11 and earlier
Description
The issue affects Event Tickets with Ticket Scanner, allowing Server Side Include (SSI) Injection due to improper neutralization of special elements used in a template engine. This can lead to security risks.
Recommendations
For versions 2.3.11 and earlier, update to version 2.3.12 to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the application to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾