Lucene search
GoogleOSV:CVE-2020-11056HistoryMay 07, 2020 - 9:15 p.m.
CVE-2020-11056
2020-05-0721:15:11
Google
osv.dev
3
EPSS
0.001
Percentile
31.0%
In Sprout Forms before 3.9.0, there is a potential Server-Side Template Injection vulnerability when using custom fields in Notification Emails which could lead to the execution of Twig code. This has been fixed in 3.9.0.
Related
prion
prion
Template injection
2020-05-07 21:15:00
cvelist
cvelist
CVE-2020-11056 Potential Code Injection in Sprout Forms
2020-05-07 20:50:12
nvd
nvd
CVE-2020-11056
2020-05-07 21:15:11
github
github
Potential Code Injection in Sprout Forms
2020-05-08 21:00:02
osv
osv
Potential Code Injection in Sprout Forms
2020-05-08 21:00:02
veracode
veracode
Server-Side Template Injection (SSTI)
2020-05-08 05:10:53
cve
cve
CVE-2020-11056
2020-05-07 21:15:11