Threats tagged 'ghsa-qwh3-h35h-9j9f'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.8	CVE-2026-38431 · ERPNext v15.103.1 and before is vulnerable to Server-Side Template Injection (SSTI) Critical9.82026-05-05GCVE Database ERPNext versions 15.103.1 and earlier contain a Server-Side Template Injection (SSTI) vulnerability. This flaw allows an attacker with permissions to create or edit email templates to inject malicious template expressions that execute on the server during template rendering. The vulnerability has a critical severity rating with a CVSS score of 9.8. Report on CVE-2026-38431 Vulnerability CWE-94 #ghsa-qwh3-h35h-9j9f	GCVE Database	2026-05-05

Page 1 of 1