Threats tagged 'ghsa-m8mc-qpg2-g56x'

A critical template injection vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14 via the ciwweb.pl Perl web application. This flaw allows unauthenticated attackers to execute arbitrary commands on the affected system. Public exploit code is available through Metasploit, indicating the vulnerability is exploitable. No patch links are provided in the data, and the affected versions are not explicitly listed but are stated as prior to 9.16.14.