← Database

CVE-2021-42651

HIGH CVSS: 8.8 Published: 2022-05-11 Modified: 2026-06-17

Description

A Server Side Template Injection (SSTI) vulnerability in Pentest-Collaboration-Framework v1.0.8 allows an authenticated remote attacker to execute arbitrary code through /project/PROJECTNAME/reports/.

Affected Platforms

Pentest Collaboration Framework Project Pentest Collaboration Framework

Weakness Type

CWE-94

References