CVE-2021-42651

A Server Side Template Injection (SSTI) vulnerability in Pentest-Collaboration-Framework v1.0.8 allows an authenticated remote attacker to execute arbitrary…

published May 11, 2022

CVSS
—
EPSS
2%
Percentile
76.8
In the wild
Unconfirmed
What it is

A Server Side Template Injection (SSTI) vulnerability in Pentest-Collaboration-Framework v1.0.8 allows an authenticated remote attacker to execute arbitrary code through /project/PROJECTNAME/reports/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01684 · 76.8th percentile
Published
2022-05-11T14:11Z
EPSS history
Timeline
  • 11 MAY 14:11Z
    A Server Side Template Injection (SSTI) vulnerability in Pentest-Collaboration-Framework v1.0.8 allows an authenticated remote attacker to execute arbitrary…
    cvelistv5