| Package | Affected versions | Patched versions |
|---|---|---|
| org.thymeleaf:thymeleaf-spring5 | < 3.0.13.RELEASE | 3.0.13.RELEASE |
| thymeleaf | = 3.0.12 |
In the thymeleaf-spring5:3.0.12 component, thymeleaf combined with specific scenarios in template injection may lead to remote code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free