2 matches found
CVE-2020-12668
Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context. This could allow for abuse of the application class loader, including Arbitrary File Disclosure...
6.5AI score0.01814EPSS
SaveExploits1References5
PT-2021-9464
Name of the Vulnerable Software and Affected Versions Jinjava versions prior to 2.5.4 Description The issue allows access to arbitrary classes by calling Java methods on objects passed into a Jinjava context. This could lead to abuse of the application class loader, including Arbitrary File...
6.8CVSS5.9AI score0.01814EPSS
SaveExploits1References9
20