Headline
GHSA-52vj-mr2j-f8jh: Server-Side Template Injection in formio
A Server-Side Template Injection (SSTI) was discovered in Form.io 2.0.0. This leads to Remote Code Execution during deletion of the default Email template URL.
Server-Side Template Injection in formio
Moderate severity GitHub Reviewed Published Jun 3, 2022 • Updated Jun 3, 2022
Related news
CVE-2020-28246: GitHub - formio/formio: A Form and Data Management Platform for Progressive Web Applications.
A Server-Side Template Injection (SSTI) was discovered in Form.io 2.0.0. This leads to Remote Code Execution during deletion of the default Email template URL.