Unrated severityNVD Advisory· Published Apr 26, 2024· Updated Aug 2, 2024

CVE-2024-32404

Description

Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1, allows remote attackers to execute arbitrary code via a crafted payload to the Markup Sandbox feature.

Affected products

inducer relate/inducer relatedescription
Inducer/Relatellm-fuzzy
Range: <2024.1

Patches

Vulnerability mechanics

References

packetstormsecurity.com/2404-exploits/rlts-sstexec.txtmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000