high8.8
CVE-2017-14198
An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3.
Impact
An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. Authenticated users with permissions to edit design assets can cause Remote Code Execution (RCE) via a maliciously crafted time_format tag.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Squiz | Matrix | through 5.3.6.0 Versions 5.4.0.0, 5.4.0.1, 5.4.0.2, 5.4.0.3, 5.4.1.0 |