Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Strcxy

#26813of 53,624
9.4Total CVSS
Vulnerabilities · 1
PT-2024-38072
9.4
2024-08-01
Jinja · Jinja · CVE-2024-7093
**Name of the Vulnerable Software and Affected Versions** Dispatch (affected versions not specified) **Description** The issue arises from Dispatch's notification service utilizing Jinja templates to generate user messages. Since Jinja allows code execution within blocks and these blocks were not properly sanitized or sandboxed, users can create custom message templates that include command line scripts. These scripts are executed when the notifications are rendered and sent out. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.