CVE-2018-18893

CVE-2018-18893 a poc of CVE-2018-18893 reproduce： just run it...

Oracle GoldenGate (Oct 2022 CPU)

The version of GoldenGate installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2022 CPU advisory. - Vulnerability in Oracle GoldenGate component: Oracle GoldenGate Microservices Dell BSAFE Micro Edition Suite. The supported version that is affected is...

sh.jove:jove-jupyter-frontend_2.10 (0.1.0), sh.jove:jove-jupyter-frontend_2.11 (0.1.0) +2 more potentially affected by CVE-2018-18893 via com.hubspot.jinjava:jinjava (1.0.3)

com.hubspot.jinjava:jinjava MAVEN version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hubspot.jinjava:jinjava and may be impacted: - sh.jove:jove-jupyter-frontend2.10 0.1.0 - sh.jove:jove-jupyter-frontend2.11 0.1.0 -...

CVE-2018-18893

Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java...

CVE-2018-18893

CVE-2018-18893 affects Jinjava up to version 2.4.5; the vulnerability arises because JinjavaBeanELResolver does not block getClass, enabling potential attacker-controlled object types to influence evaluation. Public references (GHSA, OSV, Veracode) describe risks of remote code execution or arbit...