Template injection in thymeleaf-spring5

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-43466 · ADVISORY
• thymeleaf/thymeleaf-spring · WEB
• gitee.com/wayne_wwang/wayne_wwang/blob/master/2021/10/31/ruoyi+thymeleaf-rce/index.html · WEB
• thymeleaf/thymeleaf-spring · PACKAGE
• security.netapp.com/advisory/ntap-20221014-0001 · WEB
• vuldb.com · WEB
• security.netapp.com/advisory/ntap-20221014-0001 · Third Party Advisory

org.thymeleaf:thymeleaf-spring5 のその他の脆弱性

• CVE-2026-41901緊急 9.0Thymeleaf is a server-side Java template engine for web and standalone environments. Prior to 3.1.5.RELEASE, a security bypass vulnerability…
• CVE-2026-40478緊急 9.0Thymeleaf is a server-side Java template engine for web and standalone environments. Versions 3.1.3.RELEASE and prior contain a security byp…
• CVE-2026-40477緊急 9.0Thymeleaf is a server-side Java template engine for web and standalone environments. Versions 3.1.3.RELEASE and prior contain a security byp…