Description
European Chemicals Agency IUCLID before 6.27.6 allows remote authenticated users to execute arbitrary code via Server Side Template Injection (SSTI) with a crafted template file. The attacker must have template manager permission.
High · 8.8
CVE-2023-26546
EUVD-2023-30343GHSA-3r37-p8j6-6wp6
European Chemicals Agency IUCLID before 6.27.6 allows remote authenticated users to execute arbitrary code via Server Side Template Injecti…
Published May 2, 2023 · Updated Jan 30, 2025 · Assigned by mitre