Jinjava calls getClass

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2018-18893 · ADVISORY
• HubSpot/jinjava#230 · WEB
• HubSpot/jinjava · PACKAGE
• HubSpot/jinjava · WEB
• GitHub Advisory GHSA-45r8-3495-x6rm · ADVISORY

Lỗ hổng khác của com.hubspot.jinjava:jinjava

• CVE-2026-25526NGHIÊM TRỌNG 9.8JinJava is a Java-based template engine based on django template syntax, adapted to render jinja templates. Prior to versions 2.7.6 and 2.8.…
• CVE-2025-59340NGHIÊM TRỌNG 10.0jinjava is a Java-based template engine based on django template syntax, adapted to render jinja templates. Priori to 2.8.1, by using mapper…
• CVE-2020-12668TRUNG BÌNH 6.5Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context. This could allow fo…