document-merge-service vulnerabilities
2 known vulnerabilities in document-merge-service from Adfinis. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
7.2average CVSS score
Latest first
- 7.2 High severity
document-merge-service: Improper Neutralization of Special Elements Used in a Template Engine
Document Merge Service is a document template merge service providing an API to manage templates and merge them with given data. Prior to version 9.1.0, a remote code execution (RCE) via server-side template injection (SSTI) allows for user supplied code to be
- 7.2 High severity
document-merge-service: Improper Neutralization of Special Elements Used in a Template Engine
Document Merge Service is a document template merge service providing an API to manage templates and merge them with given data. Versions 6.5.1 and prior are vulnerable to remote code execution via server-side template injection which, when executed as root, c