Description (CNA)
Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to access server-side files and state via template injection
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| GBIF / Integrated Publishing Toolkit | affected 0 before 3.3.4 |
CWE
CWE-1336
References
- https://www.gbif.org/ipt
- https://github.com/gbif/ipt/issues/3118
- https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0016.md
ADP enrichment
No English description supplied.
No references supplied.