Threats tagged 'ghsa-j937-qw2q-vm46'

DataGerry versions prior to 3.3.0 have a server-side template injection vulnerability that allows authenticated users with specific permissions to inject and execute arbitrary Jinja2 payloads. This vulnerability enables remote code execution as the web process user, which is root by default in Docker deployments.