{"action":"Upgrade org.thymeleaf:thymeleaf-spring5 to 3.0.13.RELEASE or later.","affected":[{"fixed":"3.0.13.RELEASE","introduced":"0"}],"component":"org.thymeleaf:thymeleaf-spring5","cve_ids":["CVE-2021-43466"],"ecosystem":"Maven","epss":0.03993,"exploited":false,"fixed_versions":["3.0.13.RELEASE"],"ghsa_id":"GHSA-qcj6-jqrg-4wp2","id":"tcs_01M5N999Q3AQXXDQJHKCEHWKRF","modified_at":"2024-02-20T05:33:13.432414Z","published_at":"2021-11-10T19:52:33Z","references":["https://osv.dev/vulnerability/GHSA-qcj6-jqrg-4wp2","https://nvd.nist.gov/vuln/detail/CVE-2021-43466","https://github.com/thymeleaf/thymeleaf-spring/issues/263#issuecomment-977199524","https://gitee.com/wayne_wwang/wayne_wwang/blob/master/2021/10/31/ruoyi+thymeleaf-rce/index.html","https://github.com/thymeleaf/thymeleaf-spring","https://security.netapp.com/advisory/ntap-20221014-0001","https://vuldb.com/?id.186365"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-qcj6-jqrg-4wp2","url":"https://osv.dev/vulnerability/GHSA-qcj6-jqrg-4wp2"}],"summary":"Template injection in thymeleaf-spring5"}