EUVD-2020-0549

Malware in sbrugna...

CVE-2020-11994

Server-Side Template Injection and arbitrary file disclosure on Camel templating components...

CVE-2020-11994

CVE-2020-11994 is a Server-Side Template Injection in the Apache Camel templating component used by Oracle Enterprise Manager Cloud Control Base Platform (13.4.0.0), specifically in the Reporting Framework. The vulnerability enables arbitrary file disclosure and high-impact data exposure due to C...