CVE-2026-71880 — Server-side template injection in Integrated Publishing Toolkit
Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to access server-side file…
Published: 2026-08-18 · CVSS: 7.6 · CVSS 4.0
Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to access server-side files and state via template injection
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7