CVE-2026-71880
2026-08-18
18h19 +00:00
18h19 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to access server-side files and state via template injection
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Improper Neutralization of Special Elements Used in a Template Engine The product uses a template engine to insert or process externally-influenced input, but it does not neutralize or incorrectly neutralizes special elements or syntax that can be interpreted as template expressions or other code directives when processed by the engine. |
