Back to Database
Status published
Critical
CVE-2024-7093
Server-Side Template Injection in Dispatch Message Templates
Vulnerability Description
Dispatch's notification service uses Jinja templates to generate messages to users. Jinja permits code execution within blocks, which were neither properly sanitized nor sandboxed. This vulnerability enables users to construct command line scripts in their custom message templates, which are then executed whenever these notifications are rendered and sent out.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-7093
Credits & Attribution
No credits recorded in the NVD database.
More from Netflix
View All →CVE-2024-9301
A path traversal issue in E2Nest prior to commit 8a41948e553c89c56b14410c6ed395e9cfb9250a...
High
8.7
CVE-2024-5023
Arbitrary File Read Vulnerability in ConsoleMe via Limited Git command RCE
Critical
9.3
CVE-2024-4701
Path Traversal vulnerability via File Uploads in Genie
Critical
9.9
CVE-2023-40171
Dispatch writes JWT tokens in error message
Critical
9.1
CVE-2023-30797
Insecure Random Generation in Netflix Lemur
High
7.5
Affected Vendor
Netflix
View all reports →Affected Software
Dispatch
Vulnerable Versions:
0
Timeline
Official Publish:
August 1st, 2024
Last Modified:
August 2nd, 2024
Added to House:
July 22nd, 2026