CVE-2015-0845

Published 17 Apr 2015 · Updated 06 Aug 2024

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 3.7%

Format string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro and Advanced 6.0.x before 6.0.8 allows remote attackers to execute arbitrary code via vectors related to localization of templates.

Affected products

n/a · n/a

References

https://movabletype.org/news/2015/04/movable_type_608_and_5213_released_to_close_security_vulnera.html http://www.debian.org/security/2015/dsa-3227 http://www.securitytracker.com/id/1032153