CVE-2024-22722

Summary

Server Side Template Injection (SSTI) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field under the add forms section of the application.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

CVE Program Container

Additional References

• https://hakaisecurity.io/error-404-your-security-not-found-tales-of-web-vulnerabilities/

References

• https://hakaisecurity.io/error-404-your-security-not-found-tales-of-web-vulnerabilities/

• ←Previous
• Next→