PT-2023-22359 · Pyrocms · Pyrocms
CVE-2023-29689
·
Publicado
2023-08-04
·
Atualizado
2023-08-09
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
PyroCMS version 3.9
Description
The issue is a remote code execution flaw that can be exploited through a server-side template injection (SSTI) flaw, allowing a malicious attacker to send customized commands to the server and execute arbitrary code on the affected system.
Recommendations
For PyroCMS version 3.9, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Pyrocms