{"uuid": "21f673b2-cd1b-48f5-b198-7aec8dc1aaf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-7799", "type": "seen", "source": "https://t.me/cveNotify/507", "content": "\ud83d\udea8 CVE-2020-7799\nAn issue was discovered in FusionAuth before 1.11.0. An authenticated user, allowed to edit e-mail templates (Home -> Settings -> Email Templates) or themes (Home -> Settings -> Themes), can execute commands on the underlying operating system by abusing freemarker.template.utility.Execute in the Apache FreeMarker engine that processes custom templates.\n\n\ud83c\udf96@cveNotify", "creation_timestamp": "2020-01-28T16:37:36.000000Z"}