Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OpenMetadata Server-Side Template Injection (SSTI) in FreeMarker email templates that leads to RCE
Vulnerability Description
OpenMetadata is a unified metadata platform. Versions prior to 1.11.4 are vulnerable to remote code execution via Server-Side Template Injection (SSTI) in FreeMarker email templates. An attacker must have administrative privileges to exploit the vulnerability. Version 1.11.4 contains a patch.
CVSS Information
N/A
Vulnerability Type
CWE-1336
Vulnerability Title
OpenMetadata 安全漏洞
Vulnerability Description
OpenMetadata是OpenMetadata开源的一个统一的发现、可观察和治理平台，由中央元数据存储库、深入的沿袭和无缝团队协作提供支持。 OpenMetadata 1.11.4之前版本存在安全漏洞，该漏洞源于FreeMarker电子邮件模板存在服务器端模板注入，可能导致远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A