High severity7.5NVD Advisory· Published Apr 26, 2024· Updated Jun 17, 2026

CVE-2024-32406

Description

Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload to the Batch-Issue Exam Tickets function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Inducer/Relate2 versions
cpe:2.3:a:inducer:relate:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:inducer:relate:*:*:*:*:*:*:*:*range: <2024.1
- (no CPE)range: <2024.1
inducer relate/inducer relatedescription

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/178251/Relate-Learning-And-Teaching-System-SSTI-Remote-Code-Execution.htmlnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000