GHSA-9hvg-qw5q-wqwp
Bagisto SSTI vulnerability in type parameter can lead to RCE
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | bagisto/bagisto | < 2.3.10 | 2.3.10 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Summary
SSTI is possible in Bagisto via type parameter can lead to RCE and other exploitations.
### Details
1. Go to `http://127.0.0.1:8000/admin/reporting/products/view?type={{7*7}}`
<img width="1251" height="282" alt="image" src="https://github.com/user-attachments/assets/652e96f4-631e-4322-8561-63f4d897a480" />
### Impact
Can lead to RCE, command injection.
References
External links from the advisory. They lead to third-party sites.