Beveiligingsadvies

CVE-2024-29178

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-07-18 11:15:56
Laatst bijgewerkt 2025-02-13 17:47:39
Toegewezen door apache
CVSS-score 8.8
Status PUBLISHED

Beschrijving

On versions before 2.1.4, a user could log in and perform a template injection attack resulting in Remote Code Execution on the server, The attacker must successfully log into the system to launch an attack, so this is a moderate-impact vulnerability. Mitigation: all users should upgrade to 2.1.4