CVE-2023-22527

CVE-2023-22527 Atlassian Confluence - Remote Code Execution CVE-2023-22527 Poc POST /template/aui/text-inline.vm HTTP/1.1 Host: localhost:8090 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/119.0.6045.159 Safari/537.36 Content-Type:...

CVE-2026-109199

LogicalDOC Community Edition through 9.3 contains a code injection vulnerability that allows authenticated users to execute OS commands by submitting Velocity templates in DocumentService.sendAsEmail subject or message fields. Attackers can invoke SystemTool exec methods or ClassTool, bypassing t...

CVE-2026-109199

LogicalDOC Community Edition versions through 9.3 are vulnerable to a code injection vulnerability within the DocumentService.sendAsEmail function. The flaw allows authenticated users to execute arbitrary OS commands by submitting malicious Velocity templates in the subject or message fields. Att...

EUVD-2026-97446

LogicalDOC Community Edition through 9.3 contains a code injection vulnerability that allows authenticated users to execute OS commands by submitting Velocity templates in DocumentService.sendAsEmail subject or message fields. Attackers can invoke SystemTool exec methods or ClassTool, bypassing t...

CVE-2026-109199 LogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail Template

LogicalDOC Community Edition through 9.3 contains a code injection vulnerability that allows authenticated users to execute OS commands by submitting Velocity templates in DocumentService.sendAsEmail subject or message fields. Attackers can invoke SystemTool exec methods or ClassTool, bypassing t...

PT-2026-110585

Name of the Vulnerable Software and Affected Versions LogicalDOC Community Edition versions prior to 9.4 Description Authenticated users can execute operating system commands by submitting Velocity templates through the sendAsEmail function in DocumentService. By manipulating the subject or messa...

CVE-2026-109199: Improper Control of Generation of Code

LogicalDOC Community Edition through 9.3 contains a code injection vulnerability that allows authenticated users to execute OS commands by submitting Velocity templates in DocumentService.sendAsEmail subject or message fields. Attackers can invoke SystemTool exec methods or ClassTool, bypassing t...

CLEANSTART-2026-JU40621 attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container

Security vulnerability affects the apache-hive package. An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container...

CVE-2026-49832

DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, versions 9.0-rc1 to before 9.3, and version 10-rc1, Remote Code Execution RCE is possible via Velocity Templates used by DSpace for COAR Notify/LDN...

CVE-2026-49832

DSpace is an open-source institutional repository. Versions 8.0–8.3, 9.0–9.2 , and 10-rc1 are vulnerable to Remote Code Execution via Velocity Templates used for COAR Notify/LDN messages. The root cause is that the template context exposed the full ConfigurationService object to Velocity, enablin...

EUVD-2026-70237

DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, versions 9.0-rc1 to before 9.3, and version 10-rc1, Remote Code Execution RCE is possible via Velocity Templates used by DSpace for COAR Notify/LDN...

CVE-2026-49832 DSpace: Remote Code Execution (RCE) possible in Velocity Templates used by LDN

DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, versions 9.0-rc1 to before 9.3, and version 10-rc1, Remote Code Execution RCE is possible via Velocity Templates used by DSpace for COAR Notify/LDN...

CVE-2026-49832 DSpace: Remote Code Execution (RCE) possible in Velocity Templates used by LDN

DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, versions 9.0-rc1 to before 9.3, and version 10-rc1, Remote Code Execution RCE is possible via Velocity Templates used by DSpace for COAR Notify/LDN...

CVE-2026-49832 DSpace: Remote Code Execution (RCE) possible in Velocity Templates used by LDN

DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, versions 9.0-rc1 to before 9.3, and version 10-rc1, Remote Code Execution RCE is possible via Velocity Templates used by DSpace for COAR Notify/LDN...

CVE-2026-49833

DSpace (open source repository application) is affected by a path traversal vulnerability in the COAR Notify / LDN service (versions 8.0–8.3, 9.0–9.2, 10.0-rc1). The LDN class fails to restrict template file paths to the trusted $dspace.dir/config/ldn directory, allowing an attacker with administ...

CVE-2026-49832: Improper Control of Generation of Code

DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, versions 9.0-rc1 to before 9.3, and version 10-rc1, Remote Code Execution RCE is possible via Velocity Templates used by DSpace for COAR Notify/LDN...

DSpace has possible Remote Code Execution (RCE) through Velocity Templates used by LDN

Overview Remote Code Execution RCE is possible via Velocity Templates used by DSpace for COAR Notify/LDN messages. This vulnerability impacts DSpace versions 8.0 = 8.3, 9.0 = 9.2. The attacker MUST already have DSpace administrator credentials in order to perform the attack. This attack is relate...

GHSA-9X82-RM84-C6X7 DSpace has possible Remote Code Execution (RCE) through Velocity Templates used by LDN

Overview Remote Code Execution RCE is possible via Velocity Templates used by DSpace for COAR Notify/LDN messages. This vulnerability impacts DSpace versions 8.0 = 8.3, 9.0 = 9.2. The attacker MUST already have DSpace administrator credentials in order to perform the attack. This attack is relate...

Arbitrary Code Injection

Overview org.dspace:dspace-api is a DSpace core data model and service APIs. Affected versions of this package are vulnerable to Arbitrary Code Injection through the Velocity template processing in org.dspace.core.LDN and org.dspace.core.Email. An attacker with DSpace administrator credentials ca...

PT-2026-56677

Name of the Vulnerable Software and Affected Versions DSpace versions 8.0-rc1 through 8.3 DSpace versions 9.0-rc1 through 9.2 DSpace version 10-rc1 Description Remote Code Execution RCE is possible via Velocity Templates used for COAR Notify/LDN messages. An attacker with DSpace administrator...