← All advisories

High severity8.8NVD Advisory· Published Apr 22, 2024· Updated Jun 17, 2026

CVE-2024-32407

CVE-2024-32407

Description

An issue in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload to the Page Sandbox feature.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Inducer/Relate2 versions
cpe:2.3:a:inducer:relate:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:inducer:relate:*:*:*:*:*:*:*:*range: <2024.1
- (no CPE)
Inducer/inducerllm-create
Range: <2024.1

Patches

Vulnerability mechanics

References

2

cxsecurity.com/issue/WLB-2024040049nvdExploitThird Party Advisory
book.hacktricks.xyz/v/jp/pentesting-web/ssti-server-side-template-injectionnvdPermissions Required

News mentions

0

No linked articles in our index yet.