Em resumo
- CVE-2020-12668 é uma vulnerabilidade MÉDIO (CVSS 6.5) que afeta com.hubspot.jinjava:jinjava, jinjava (hubspot).
- Chance de exploração nos próximos 30 dias (EPSS): 1.8%, maior que 78.7% das vulnerabilidades.
- Correção: atualize para 2.5.4 ou posterior.
Description
Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context. This could allow for abuse of the application class loader, including Arbitrary File Disclosure.
NVD description
Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context. This could allow for abuse of the application class loader, including Arbitrary File Disclosure.
Mais vulnerabilidades de com.hubspot.jinjava:jinjava
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free