CVE-2024-32404

Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1, allows remote attackers to execute arbitrary code via a crafted payload to the Markup Sandbox feature.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

cpe:2.3:a:inducer:relate:*:*:*:*:*:*:*:*

History

30 Jun 2025, 14:11

Type Values Removed Values Added
References () https://packetstormsecurity.com/2404-exploits/rlts-sstexec.txt - () https://packetstormsecurity.com/2404-exploits/rlts-sstexec.txt - Broken Link
First Time Inducer relate
Inducer
CPE cpe:2.3:a:inducer:relate:*:*:*:*:*:*:*:*

26 Apr 2024, 04:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-04-26 04:15

Updated : 2025-06-30 14:11


NVD link : CVE-2024-32404

Mitre link : CVE-2024-32404


JSON object : View

Products Affected

inducer

  • relate
CWE

No CWE.