| Package | Affected versions | Patched versions |
|---|---|---|
| com.hubspot.jinjava:jinjava | < 2.5.4 | 2.5.4 |
| jinjava | < 2.5.4 | 2.5.4 |
Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context. This could allow for abuse of the application class loader, including Arbitrary File Disclosure.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free