CVE-2021-42651
A Server Side Template Injection (SSTI) vulnerability in Pentest-Collaboration-Framework v1.0.8 allows an authenticated remote attacker to execute arbitrary code through /project/PROJECTNAME/reports/.
CVSS 3.1 · 8.8 High
EPSS 1.7%
KEV · Not listed
Vendors
Products