CVE-2024-22533

Before Beetl v3.15.12, the rendering template has a server-side template injection SSTI vulnerability. When the incoming template is controllable, it will be filtered by the DefaultNativeSecurityManager blacklist. Because blacklist filtering is not strict, the blacklist can be bypassed, leading t...

CVE-2024-22533

Before Beetl v3.15.12, the rendering template has a server-side template injection SSTI vulnerability. When the incoming template is controllable, it will be filtered by the DefaultNativeSecurityManager blacklist. Because blacklist filtering is not strict, the blacklist can be bypassed, leading t...

CVE-2024-22533

Beetl SSTI in versions prior to 3.15.12: the rendering template can be controlled, and the DefaultNativeSecurityManager blacklist is bypassable, enabling arbitrary code execution. Public sources (CVE-2024-22533 and related advisories) confirm the flaw exists in Beetl up to 3.15.11 and is exploita...

CVE-2024-22533

Before Beetl v3.15.12, the rendering template has a server-side template injection SSTI vulnerability. When the incoming template is controllable, it will be filtered by the DefaultNativeSecurityManager blacklist. Because blacklist filtering is not strict, the blacklist can be bypassed, leading t...

Beetl Security Vulnerabilities

Beetl is a high-speed template engine by the individual developer Li Jiazhi xiandafu in China. A security vulnerability exists in Beetl v3.15.12 and earlier versions, which stems from lax blacklist filtering. The vulnerability can be exploited by an attacker to remotely execute code...

PT-2024-19473 · Beetl · Beetl

Name of the Vulnerable Software and Affected Versions: Beetl versions prior to 3.15.12 Description: The rendering template in Beetl has a server-side template injection SSTI vulnerability. When the incoming template is controllable, it will be filtered by the DefaultNativeSecurityManager blacklis...

GHSA-V9WR-2XRG-V7W8 Cross-site Scripting in beetl-bbs

Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword parameter...

Cross-site Scripting in beetl-bbs

Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword parameter...

CVE-2024-22490

Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword parameter...

beetl-bbs Cross-Site Scripting Vulnerability

beetl-bbs is a forum system by xiandafu's personal developer. A cross-site scripting vulnerability exists in beetl-bbs version 2.0, which allows an attacker to run arbitrary code via the /index keyword parameter...

CVE-2024-22490

Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword parameter...

PT-2024-19447 · Beetl-Bbs · Beetl-Bbs

Name of the Vulnerable Software and Affected Versions: beetl-bbs version 2.0 Description: The issue is related to a Cross Site Scripting XSS flaw that allows attackers to execute arbitrary code. This is achieved by exploiting the keyword parameter in the "/index" API endpoint. Recommendations: Fo...

CVE-2024-22490

Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the /index keyword parameter...

CVE-2024-22490

CVE-2024-22490 affects beetl-bbs 2.0. The vulnerability is a Cross Site Scripting (XSS) flaw exploitable via the /index endpoint using the keyword parameter, allowing arbitrary code execution according to the description. The connected documents confirm the affected product and the input vector b...

GHSA-32Q4-86G8-6637 Stored Cross Site Scripting in beetl-bbs

A Stored Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the post/save content parameter...

Stored Cross Site Scripting in beetl-bbs

A Stored Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the post/save content parameter...

CVE-2024-22491

A Stored Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the post/save content parameter...

Cross site scripting

A Stored Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the post/save content parameter...

beetl-bbs Security Vulnerabilities

beetl-bbs is a forum system by xiandafu's personal developer. A security vulnerability exists in version 2.0 of beetl-bbs, which stems from a stored cross-site scripting XSS vulnerability in the post/save content parameter...

PT-2024-19448 · Beetl-Bbs · Beetl-Bbs

Name of the Vulnerable Software and Affected Versions: beetl-bbs version 2.0 Description: A Stored Cross Site Scripting XSS vulnerability allows attackers to run arbitrary code via the "post/save" content parameter. This issue enables attackers to execute code on the affected system...