CVE-2021-42651: Pentest Collaboration Framework Project Pentest Collaboration Framework

High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days.

A Server Side Template Injection (SSTI) vulnerability in Pentest-Collaboration-Framework v1.0.8 allows an authenticated remote attacker to execute arbitrary code through /project/PROJECTNAME/reports/.

Affected products

• Pentest Collaboration Framework Project Pentest Collaboration Framework: version 1.0.8 only

Published 2022-05-11. Last modified 2026-06-17.