PT-2024-35231

CVE-2024-52393

Published

2024-11-14

Updated

2024-11-15

Description by

CVSS 3.1

9.1

Critical

MetricsAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Podlove Podcast Publisher versions through 4.1.15

Description The issue is related to an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. This vulnerability allows for remote attacks due to flaws in the template engine.

Recommendations For versions through 4.1.15, update to a newer version to mitigate the risk of cyber attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Hakiduck

Vendors

Affected products

Weakness enumeration

CWE-1336: Improper Neutralization of Special Elements Used in a Template Engine

CWE-82: Improper Neutralization of Script in Attributes of IMG Tags in a Web Page

CWE-94: Improper Control of Generation of Code (\'Code Injection\')

Related identifiers