CVE-2026-71880
2026-08-18
18h19 +00:00
18h19 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
CVE の説明
Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to access server-side files and state via template injection
CVE の情報
関連する弱点
| 弱点名 | 出典 | |
|---|---|---|
| Improper Neutralization of Special Elements Used in a Template Engine The product uses a template engine to insert or process externally-influenced input, but it does not neutralize or incorrectly neutralizes special elements or syntax that can be interpreted as template expressions or other code directives when processed by the engine. |
