CVE-2024-22491

A Stored Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the post/save content parameter...

CVE-2024-22491

A Stored Cross Site Scripting XSS vulnerability in beetl-bbs 2.0 allows attackers to run arbitrary code via the post/save content parameter...

CVE-2024-22491

The CVE-2024-22491 entry concerns beetl-bbs 2.0 with a Stored Cross-Site Scripting (XSS) vulnerability in the post/save content parameter. The underlying impact is described as attackers being able to run arbitrary code, with a CVSS v3.1 base score of 5.4 (Medium) and user interaction required. T...

GHSA-M69H-4FRQ-VWQ7 Server-side template injection in beetl

An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection SSTI via a crafted payload...

Server-side template injection in beetl

An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection SSTI via a crafted payload...

CVE-2023-30331

An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection SSTI via a crafted payload...

CVE-2023-30331

An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection SSTI via a crafted payload...

Sql injection

An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection SSTI via a crafted payload...

PT-2023-22639 · Beetl · Beetl

Name of the Vulnerable Software and Affected Versions: beetl version 3.15.0 Description: An issue in the render function allows attackers to execute server-side template injection SSTI via a crafted payload. Recommendations: For beetl version 3.15.0, consider disabling the render function until a...

CVE-2023-30331

An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection SSTI via a crafted payload...

CVE-2023-30331

CVE-2023-30331 affects Beetl v3.15.0 where the render function is vulnerable to server-side template injection (SSTI). The root cause is insufficient checks in the render path, enabling a crafted payload to execute code on the server. The issue is rated CRITICAL (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U...

Beetl 安全漏洞

Beetl is a high-speed template engine from the individual developer Li Jiazhi xiandafu in China. A security vulnerability exists in Beetl version v3.15.0, which stems from a problem in the rendering function that allows an attacker to perform server-side template injection SSTI via a crafted...

CVE-2023-30331

An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection SSTI via a crafted payload...

jfinal cms 安全漏洞

jfinal cms is a java development of powerful information consulting website , using a simple and powerful JFinal as the web framework , template engine with beetl , database with mysql , front-end bootstrap framework . jfinal cms v5.1.0 version of a security vulnerability , the source of the...

CVE-2022-4347

A vulnerability was found in xiandafu beetl-bbs. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file WebUtils.java. The manipulation of the argument user leads to cross site scripting. The attack can be launched remotely. The exploit has bee...

Cross site scripting

A vulnerability was found in xiandafu beetl-bbs. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file WebUtils.java. The manipulation of the argument user leads to cross site scripting. The attack can be launched remotely. The exploit has bee...

beetl-bbs 安全漏洞

beetl-bbs is a forum system by xiandafu individual developers. A security vulnerability exists in beetl-bbs due to cross-site scripting resulting from the manipulation of the user parameter by an unknown function in its WebUtils.java file. The attack method is publicly available and can be...

PT-2022-26931 · Unknown · Xiandafu Beetl-Bbs

Name of the Vulnerable Software and Affected Versions: xiandafu beetl-bbs affected versions not specified Description: A vulnerability was found in xiandafu beetl-bbs, affecting an unknown functionality of the file WebUtils.java. The manipulation of the user argument leads to cross-site scripting...

CVE-2022-4347 xiandafu beetl-bbs WebUtils.java cross site scripting

A vulnerability was found in xiandafu beetl-bbs. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file WebUtils.java. The manipulation of the argument user leads to cross site scripting. The attack can be launched remotely. The exploit has bee...

CVE-2022-4347

The CVE-2022-4347 entry concerns xiandafu beetl-bbs WebUtils.java and a cross-site scripting vulnerability. The known issue is that manipulating the user argument can trigger XSS, with remote exploitation and a publicly disclosed exploit. The connected documents provide no product version ranges ...