地图 / Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.com

Unrestricted File System Access via Twig Template Injection on dev-ucrm-billing-demo.ubnt.com

代码执行 / Unlabeled / #301406

厂商: Ubiquiti Inc.
严重程度: 中危 · CVSS 8.7
赏金: —
弱点: Unlabeled
研究员: @dawgyg
披露日期: 2018-03-07
资产: *.ubnt.com
CVE: CVE-2017-0913

该报告还没有中文解读。

时间线

2017-12-30报告提交
2018-03-07公开披露

阅读 HackerOne 原文 ↗作者 @dawgyg · 版权归作者与 Ubiquiti Inc. 所有

同类报告

CVE-2020-8913 - Persistent arbitrary code execution in Android's Google Play Core Library: details, explanation and the PoCGoogle · —Remote code execution [CVE-2023-36845]MTN Group · 2024-10-09 Remote Code Execution on Proxy Service (as root)██████ · —XSS Vulnerability on Pressable/Atomic Hosting Platform via unescaped admin notices leads to code executionAutomattic · 2026-02-18 Remote Code Execution via unsafe usage of `reply.view({ raw })` in @fastify/view (EJS template engine)Fastify · 2025-05-28 Reflected XSS and Server Side Template Injection in all HubSpot CMSesHubSpot Inactive · —