In short
- CVE-2020-12668 is a MEDIUM (CVSS 6.5) vulnerability affecting com.hubspot.jinjava:jinjava, jinjava (hubspot).
- Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.7% of all vulnerabilities.
- Fix: update to 2.5.4 or later.
Description
Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context. This could allow for abuse of the application class loader, including Arbitrary File Disclosure.
NVD description
Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context. This could allow for abuse of the application class loader, including Arbitrary File Disclosure.
More vulnerabilities in com.hubspot.jinjava:jinjava
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free