CVE-2021-35450
A Server Side Template Injection in the Entando Admin Console 6.3.9 and before allows a user with privileges to execute FreeMarker template with command execution via freemarker…
Published: 2021-08-02 · CVSS: Unscored
A Server Side Template Injection in the Entando Admin Console 6.3.9 and before allows a user with privileges to execute FreeMarker template with command execution via freemarker.template.utility.Execute
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7