"This is our world now… the world of the electron and the switch, the beauty of the baud"

Tag: craftcms

Name: CraftCMS Zero-day – SSTI + XSS triggering RCE
Uploaded: 2021-07-29T11:25:22+01:00
Channel: Vikrant
Description: Found by 0xFFF member crypto Overview: CraftCMS allows users to upload files via its Asset field. But the storage feature known as volume within Craft CMS can be configured to point to any directory. This ability can be exploited to upload a twig template to the templates directory. By pointing a route to the uploaded

Uncategorized

CraftCMS Zero-day – SSTI + XSS triggering RCE

Your basket (items: 0)

Products in basket
Product	Details	Total
	Available on back-order Previous price: Discounted price:	Save