high8.8
CVE-2021-42651
A Server Side Template Injection (SSTI) vulnerability in Pentest-Collaboration-Framework v1.0.8 allows an authenticated remote attacker to execute arbitrary co…
Impact
A Server Side Template Injection (SSTI) vulnerability in Pentest-Collaboration-Framework v1.0.8 allows an authenticated remote attacker to execute arbitrary code through /project/PROJECTNAME/reports/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pentest Collaboration Framework Project | Pentest Collaboration Framework | Version 1.0.8 |