[GHSA-v5gf-r78h-55q6] document-merge-service vulnerable to Remote Code Execution via Server-Side Template Injection

[c0rydoras]

Updates

• Affected products
• CVSS v3
• Description

Comments

• privileges required changed from low to high, as an attacker requires the permissions to create templates which isn't something a "normal" user is able to do (when configured correctly)

• add note about the screenshot, system was heavily misconfigured and therefore the service ran as root, when not misconfigured it would run as the user document-merge-service with UID 901

[github]

Hi there @c0rydoras! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory