CVE-2025-46661

IPW Systems Metazo through 8.1.3 allows unauthenticated Remote Code Execution because smartyValidator.php enables the attacker to provide template expressions, aka Server-Side Template-Injection. All instances have been patched by the Supplier.

IPW Systems Metazo through 8.1.3 allows unauthenticated Remote Code Execution because smartyValidator.php enables the attacker to provide template expressions, aka Server-Side Template-Injection. All instances have been patched by the Supplier.

IPW Systems Metazo hasta la versión 8.1.3 permite la ejecución remota de código sin autenticación, ya que smartyValidator.php permite al atacante proporcionar expresiones de plantilla, también conocida como Server-Side Template-Injection. El proveedor ha parcheado todas las instancias.