Common Weakness Enumeration
CWE-97 Improper Neutralization of Server-Side Includes (SSI) Within a Web Page
Description
The product generates a web page, but does not neutralize or incorrectly neutralizes user-controllable input that could be interpreted as a server-side include (SSI) directive.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-97 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-8r5j-gm3j-cx9c | CVE-2024-29686 | HIGH | - |
Winter CMS Server-Side Template Injection (SSTI) vulnerability |
2024-08-02 |