CVE-2024-32404

MEDIUM

inducer relate < 2024.1 - Server-Side Template Injection via Markup Sandbox Feature

Title source: llm

Description

Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1, allows remote attackers to execute arbitrary code via a crafted payload to the Markup Sandbox feature.

References (1)

Core 1

Core References

Broken Link

https://packetstormsecurity.com/2404-exploits/rlts-sstexec.txt

Scores

CVSS v3 6.0

EPSS 0.0080

EPSS Percentile 51.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

Details

CWE

CWE-94

Status published

Products (1)

inducer/relate < 2024.1

Published Apr 26, 2024

Tracked Since Feb 18, 2026