Lucene search
UbuntuUSN-6282-1HistoryAug 10, 2023 - 12:00 a.m.
Velocity Tools vulnerability
2023-08-1000:00:00
ubuntu.com
26
ubuntu
remote code execution
apache velocity
Releases
- Ubuntu 20.04 LTS
- Ubuntu 18.04 ESM
- Ubuntu 16.04 ESM
Packages
- velocity-tools - A subproject of the Apache Velocity project
Details
Jackson Henry discovered that Velocity Tools incorrectly handled certain
inputs. If a user or an automated system were tricked into opening a specially
crafted input file, a remote attacker could possibly use this issue to execute
arbitrary code.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 20.04 | noarch | libvelocity-tools-java | <Â 2.0-7ubuntu0.20.04.1 | UNKNOWN |
| Ubuntu | 20.04 | noarch | libvelocity-tools-java-doc | <Â 2.0-7ubuntu0.20.04.1 | UNKNOWN |
| Ubuntu | 18.04 | noarch | libvelocity-tools-java | <Â 2.0-7ubuntu0.18.04.1~esm1 | UNKNOWN |
| Ubuntu | 18.04 | noarch | libvelocity-tools-java | <Â 2.0-7 | UNKNOWN |
| Ubuntu | 18.04 | noarch | libvelocity-tools-java-doc | <Â 2.0-7 | UNKNOWN |
| Ubuntu | 16.04 | noarch | libvelocity-tools-java | <Â 2.0-4ubuntu0.1~esm1 | UNKNOWN |
| Ubuntu | 16.04 | noarch | libvelocity-tools-java | <Â 2.0-4 | UNKNOWN |
| Ubuntu | 16.04 | noarch | libvelocity-tools-java-doc | <Â 2.0-4 | UNKNOWN |
References
Related
veracode
veracode
Cross-site Scripting (XSS)
2021-03-11 01:48:48
redhatcve
redhatcve
CVE-2020-13959
2021-03-10 17:03:47
osv
osv
Cross-site scripting (XSS) in Apache Velocity Tools
2021-03-12 20:24:22
velocity-tools - security update
2021-03-17 00:00:00
velocity-tools vulnerability
2023-08-10 15:24:17
nessus
nessus
Debian DLA-2597-1 : velocity-tools security update
2021-03-19 00:00:00
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : Velocity Tools vulnerability (USN-6282-1)
2023-08-10 00:00:00
GLSA-202107-52 : Apache Velocity: Multiple vulnerabilities
2021-10-29 00:00:00
debiancve
debiancve
CVE-2020-13959
2021-03-10 08:15:00
github
github
Cross-site scripting (XSS) in Apache Velocity Tools
2021-03-12 20:24:22
openvas
openvas
Ubuntu: Security Advisory (USN-6282-1)
2023-08-11 00:00:00
Debian: Security Advisory (DLA-2597-1)
2021-03-18 00:00:00
cvelist
cvelist
CVE-2020-13959 Velocity Tools XSS Vulnerability
2021-03-10 08:00:19
debian
debian
[SECURITY] [DLA 2597-1] velocity-tools security update
2021-03-17 16:30:27
prion
prion
Cross site scripting
2021-03-10 08:15:00
cve
cve
CVE-2020-13959
2021-03-10 08:15:00
ubuntucve
ubuntucve
CVE-2020-13959
2021-03-10 00:00:00
gentoo
gentoo
Apache Velocity: Multiple vulnerabilities
2021-07-23 00:00:00
ibm
ibm