CVE-2023-29689
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
35Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 53%
from disclosure to weapon4 days
Published on NVDAug 4
1st PoC+4d
PyroCMS 3.9 contains a remote code execution (RCE) vulnerability that can be exploited through a server-side template injection (SSTI) flaw. This vulnerability allows a malicious attacker to send customized commands to the server and execute arbitrary code on the affected system.
Affected products
n/a · n/apublic PoCs found — 3
exploitdbwww.exploit-db.com/exploits/51669unverifiedgithubgithub.com/YSaxon/pyrocms-ssti-fix★ 0cve_referencepacketstormsecurity.com/files/174088/Pyro-CMS-3.9-Server-Side-Template-Injection.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.