Relate (Inducer) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 0 known versions, newest CVE from 2024-04-26. Vendor: Inducer.

CVEs of Relate

• CVE-2024-32406 - CVSS 7.5 (high), 2024-04-26: Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload…
• CVE-2024-32405 - CVSS 2.6 (low), 2024-04-22: Cross Site Scripting vulnerability in inducer relate before v.2024.1 allows a remote attacker to escalate privileges via a crafted payload to the Answer field…
• CVE-2024-32407 - CVSS 8.8 (high), 2024-04-22: An issue in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload to the Page Sandbox feature.