2025-10-28 00:00:00
mitre
PUBLISHED
zhangyd-c OneBlog before 2.3.9 was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates.