SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  CachetHQ Server-Side Template Injection 1

Category: WEB-ATTACKS      

Cachet, the open-source status page system. Prior to the 2.4 branch, a template functionality which allows users to create templates allows them to execute any code on the server during the bad filtration and old twig version.

References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3915


Relevant Information