An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. Authenticated users with permissions to edit design assets can cause Remote Code Execution (RCE) via a maliciously crafted time_format tag.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-11-30T02:00:00
Updated: 2024-08-05T19:20:41.335Z
Reserved: 2017-09-07T00:00:00
Link: CVE-2017-14198
Vulnrichment
No data.
NVD
Status : Modified
Published: 2017-11-30T02:29:03.227
Modified: 2024-11-21T03:12:20.723
Link: CVE-2017-14198
Redhat
No data.