Vendor/product archive

apache / velocity_engine CVEs

Beta · best-effort

1 CVEs tagged to apache / velocity_engine — 0 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to apache vendor archive

CVE-2020-13936

Published Mar 10, 2021

An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

Showing 1-1 of 1 CVEsPage 1 of 1