Apache

Velocity Engine

1 vulnerability found

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9

CVE-2020-13936

  • EPSS 10.63%
  • Published 10.03.2021 08:15:14
  • Last modified 21.11.2024 05:02:11

An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to u...