CVE-2022-37767
1 advisory.
Maven/io.pebbletemplates:pebble CVE-2022-37767: critical 9.8, EPSS 1.48%
Pebble Templates protection mechanism bypass can lead to arbitrary code execution
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.1.5 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-wxx5-w9jc-48wx
- https://nvd.nist.gov/vuln/detail/CVE-2022-37767
- https://github.com/PebbleTemplates/pebble/issues/625#issuecomment-1282138635
- https://github.com/Y4tacker/Web-Security/issues/3
CVE-2022-37767 · published · modified · JSON