CVE-2022-24881 Command Injection in Ballcat Codegen

Ballcat Codegen provides the function of online editing code to generate templates. In versions prior to 1.0.0.beta.2, attackers can implement remote code execution through malicious code injection of the template engine. This happens because Velocity and freemarker templates are introduced but...

CVE-2022-24881 Command Injection in Ballcat Codegen

Ballcat Codegen provides the function of online editing code to generate templates. In versions prior to 1.0.0.beta.2, attackers can implement remote code execution through malicious code injection of the template engine. This happens because Velocity and freemarker templates are introduced but...

CVE-2022-24881

CVE-2022-24881 concerns Ballcat Codegen. Affected versions prior to 1.0.0.beta.2 allow remote code execution via malicious code injection in the template engine, caused by using Velocity and Freemarker templates without proper input verification. The issue is fixed in 1.0.0.beta.2. Public sources...