Description
A Server Side Template Injection in the Entando Admin Console 6.3.9 and before allows a user with privileges to execute FreeMarker template with command execution via freemarker.template.utility.Execute
Unscored
CVE-2021-35450
EUVD-2021-22092GHSA-pv5c-5q27-f5cp
A Server Side Template Injection in the Entando Admin Console 6.3.9 and before allows a user with privileges to execute FreeMarker template…
Published Aug 2, 2021 · Updated Aug 4, 2024 · Assigned by mitre