Komm.One CMS 10.4.2.14 has a... CVE-2024-24230
-
AV
AC
AU
C
I
A
发布：
2024-03-18
修订：
2025-03-25
Komm.One CMS 10.4.2.14 has a Server-Side Template Injection (SSTI) vulnerability via the Velocity template engine. It allows remote attackers to execute arbitrary code via a URL that specifies java.lang.Runtime in conjunction with getRuntime().exec followed by an OS command.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有0条受影响产品信息
