We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Zendesk (Helpdesk and Chat)
Bugpilot (Bug tracking)

Ok

THREATINT CVE Home CVE Diag Help
PUBLISHED

CVE-2024-24724

Reserved:2024-01-27
Published:2024-04-03
Updated:2024-04-03

Description

Gibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template Injection leading to Remote Code Execution because input is passed to the Twig template engine (messengerSettings.php) without sanitization.

References

https://gibbonedu.org/download/

https://packetstormsecurity.com/files/177857

cve.org CVE-2024-24724

nvd.nist.gov CVE-2024-24724

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-24724