Server-side template injection in beetl

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-30331 · ADVISORY
• gitee.com/xiandafu/beetl/issues/I6RUIP · WEB
• javamonkey/beetl2.0 · PACKAGE
• luelueking/Beetl-3.15.0-vuln-poc · WEB

com.ibeetl:beetl のその他の脆弱性

• CVE-2024-22490中 6.1Cross Site Scripting (XSS) vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword parameter.
• CVE-2024-22491中 5.4A Stored Cross Site Scripting (XSS) vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the post/save content paramete…