Craft CMS Twig Template Injection RCE via FTP Templates Path

MetasploitMetasploit exploitRubyexploit_linux/http/craftcms_ftp_template

PoC files

1 file

File viewing is interactive and short-lived. Downloads are password-protected ZIP archives using password eip.

Metasploit

Linked vulnerabilities

1