An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3
published November 30, 2017
CVSS
—
EPSS
2%
Percentile
78.0
In the wild
Unconfirmed
What it is
An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. Authenticated users with permissions to edit design assets can cause Remote Code Execution (RCE) via a maliciously crafted time_format tag.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01769 · 78.0th percentile
Published
2017-11-30T02:00Z
EPSS history
Timeline
30 NOV 02:00Z
An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3