Description
An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. Authenticated users with permissions to edit design assets can cause Remote Code Execution (RCE) via a maliciously crafted time_format tag.
Unscored
CVE-2017-14198
EUVD-2017-5708GHSA-j89g-jw24-w7m8
An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. Authenticated users with permissions to edit design assets…
Published Nov 30, 2017 · Updated Aug 5, 2024 · Assigned by mitre