high7.6
CVE-2026-71880
Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to acces…
Impact
Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to access server-side files and state via template injection
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| GBIF | GBIF Integrated Publishing Toolkit | before 3.3.4 |
Versions were read from the advisory text. No structured product data has been published for this record yet.