Security Advisory

CVE-2024-50658

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-01-07 00:00:00
Last updated 2025-01-08 15:23:20
Assigner mitre
State PUBLISHED

Description

Server-Side Template Injection (SSTI) was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in updateuserinfo.html file