VYPR
← All advisories
Medium severity6.0NVD Advisory· Published Apr 26, 2024· Updated Jun 17, 2026

CVE-2024-32404

CVE-2024-32404

Description

Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1, allows remote attackers to execute arbitrary code via a crafted payload to the Markup Sandbox feature.

Affected products

4
  • Inducer/Relate2 versions
    cpe:2.3:a:inducer:relate:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:inducer:relate:*:*:*:*:*:*:*:*range: <2024.1
    • (no CPE)range: <2024.1
  • inducer relate/inducer relatedescription
  • Inducer/inducerllm-fuzzy
    Range: <2024.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.