Maven/com.ibeetl:beetl CVE-2023-30331: critical 9.8, EPSS 0.93%
Server-side template injection in beetl
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.15.0.RELEASE |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-m69h-4frq-vwq7
- https://nvd.nist.gov/vuln/detail/CVE-2023-30331
- https://gitee.com/xiandafu/beetl/issues/I6RUIP
- https://github.com/javamonkey/beetl2.0
- https://github.com/luelueking/Beetl-3.15.0-vuln-poc
CVE-2023-30331 · published · modified · JSON