NetSight
IP …
high8.8

CVE-2023-26546

European Chemicals Agency IUCLID before 6.27.6 allows remote authenticated users to execute arbitrary code via Server Side Template Injection (SSTI) with a cra…

Impact

European Chemicals Agency IUCLID before 6.27.6 allows remote authenticated users to execute arbitrary code via Server Side Template Injection (SSTI) with a crafted template file. The attacker must have template manager permission.

Affected products

VendorProductAffected versions
Echa.EuropaIuclid
from 5.15.0 before 6.27.6

Weakness classification

CWE-94

References