CVE-2024-29178

On versions before 2.1.4, a user could log in and perform a template injection attack resulting in Remote Code Execution on the server, The attacker must successfully log into the system to launch an attack, so this is a moderate-impact vulnerability. Mitigation: all users should upgrade to 2.1.4

• CWE-94

• http://www.openwall.com/lists/oss-security/2024/07/18/1Mailing List, Third Party Advisory
• https://lists.apache.org/thread/n6dhnl68knpxy80t35qxkkw2691l8sfnMailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2024/07/18/1Mailing List, Third Party Advisory
• https://lists.apache.org/thread/n6dhnl68knpxy80t35qxkkw2691l8sfnMailing List, Vendor Advisory

Published

Jul 18, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-29172Dell BSAFE SSL-J, versions prior to 6.6 and versions 7.0 thr…7.5
• CVE-2024-29173Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, L…4.9
• CVE-2024-29174Dell Data Domain, versions prior to 7.13.0.0, LTS 7.7.5.30, …4.4
• CVE-2024-29175Dell PowerProtect Data Domain, versions prior to 7.13.0.0, L…5.9
• CVE-2024-29176Dell PowerProtect DD, version(s) 8.0, 7.13.1.0, 7.10.1.30, 7…8.8
• CVE-2024-29177Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, L…2.7
• CVE-2024-29179phpMyFAQ is an open source FAQ web application for PHP 8.1+ …4.8
• CVE-2024-2918Improper input validation in PAM JIT elevation feature in De…3.6
• CVE-2024-29180Prior to versions 7.1.0, 6.1.2, and 5.3.4, the webpack-dev-m…7.5
• CVE-2024-29181Strapi is an open-source content management system. Prior to…3.5
• CVE-2024-29182Collabora Online is a collaborative online office suite base…6.1
• CVE-2024-29183OpenRASP is a RASP solution that directly integrates its pro…6.1