In breve
- CVE-2020-12668 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda com.hubspot.jinjava:jinjava, jinjava (hubspot).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.8%, superiore al 78.7% delle vulnerabilità.
- Correzione: aggiornare a 2.5.4 o successiva.
Description
Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context. This could allow for abuse of the application class loader, including Arbitrary File Disclosure.
NVD description
Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context. This could allow for abuse of the application class loader, including Arbitrary File Disclosure.
Altre vulnerabilità di com.hubspot.jinjava:jinjava
Vedi tutto →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free