Threats tagged 'ghsa-4r7v-whpg-8rx3'

changedetection.io version prior to 0.45.21 contains a Server Side Template Injection (SSTI) vulnerability in its use of the Jinja2 template engine. This flaw allows an attacker to execute arbitrary system commands on the server hosting the application by injecting malicious payloads into notification templates. The vulnerability is critical due to the potential for complete server takeover. A fix is available in version 0.45.21.