22 matches found
CVE-2023-30331
An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection SSTI via a crafted payload...
com.ifrabbit:mybatis-beetl-scripting (>=1.0.1.release, <=1.0.2.release) potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.7.3)
com.ibeetl:beetl MAVEN version 2.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.ifrabbit:mybatis-beetl-scripting =1.0.1.release, =1.0.2.release Source cves: CVE-2023-30331 Source advisory:...
com.jflyfox:jflyfox_jfinal (4.2), org.nutz:nutz-plugins-hotplug (>=1.r.60.r3, <=1.r.65) potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.7.5)
com.ibeetl:beetl MAVEN version 2.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.jflyfox:jflyfoxjfinal 4.2 - org.nutz:nutz-plugins-hotplug =1.r.60.r3, =1.r.65 Source cves: CVE-2023-30331 Source advisory:...
cn.yerl.web:spring-boot-starter-beetl (1.0.0), com.github.devilyaos:autogenerate (0.3) +3 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.7.12)
com.ibeetl:beetl MAVEN version 2.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - cn.yerl.web:spring-boot-starter-beetl 1.0.0 - com.github.devilyaos:autogenerate 0.3 - com.ibeetl:beetlsql =2.8.4, =1.0.0,...
cn.jants:ants-core (>=1.0, <=1.1.18), com.ibeetl:beetl-framework-starter (1.0.0.release) +2 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.7.15)
com.ibeetl:beetl MAVEN version 2.7.15 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - cn.jants:ants-core =1.0, =2.8.14, =1.2.0, =1.2.1 Source cves: CVE-2023-30331 Source advisory: OSV:GHSA-M69H-4FRQ-VWQ7...
com.github.vindell:docx4j-template-beetl (1.0.0.release), com.ibeetl:beetl-framework-starter (>=1.1.31.release, <=1.1.39.release) +10 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.7.26)
com.ibeetl:beetl MAVEN version 2.7.26 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.github.vindell:docx4j-template-beetl 1.0.0.release - com.ibeetl:beetl-framework-starter =1.1.31.release, =2.10.8, =1.0.1,...
com.ibeetl:beetl-framework-starter (1.1.45.release), com.ibeetl:beetlsql (2.10.19) +1 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.7.28)
com.ibeetl:beetl MAVEN version 2.7.28 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.ibeetl:beetl-framework-starter 1.1.45.release - com.ibeetl:beetlsql 2.10.19 - net.ymate.platform:ymate-platform-webmvc...
com.ibeetl:beetl-framework-starter (>=1.1.52.release, <=1.1.54.release), org.actframework:act-beetl (>=1.4.3, <=1.4.4) +4 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.8.4)
com.ibeetl:beetl MAVEN version 2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.ibeetl:beetl-framework-starter =1.1.52.release, =1.4.3, =1.8.8.5, =1.8.8.6 - org.nutz:nutz-plugins-hotplug 1.r.66 -...
cn.jeeweb:spring-beetl-tag (1.0), com.github.lailaik:halo-api (1.1.1) +9 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.8.5)
com.ibeetl:beetl MAVEN version 2.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - cn.jeeweb:spring-beetl-tag 1.0 - com.github.lailaik:halo-api 1.1.1 - com.github.lailaik:halo-config 1.1.1 -...
org.nutz:nutz-plugins-hotplug (1.r.67), org.nutz:nutz-plugins-ngrok (1.r.67) +3 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.8.7)
com.ibeetl:beetl MAVEN version 2.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - org.nutz:nutz-plugins-hotplug 1.r.67 - org.nutz:nutz-plugins-ngrok 1.r.67 - org.nutz:nutz-plugins-views 1.r.67 -...
com.ibeetl:beetl-framework-starter (1.1.61.release) potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.9.0)
com.ibeetl:beetl MAVEN version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.ibeetl:beetl-framework-starter 1.1.61.release Source cves: CVE-2023-30331 Source advisory: OSV:GHSA-M69H-4FRQ-VWQ7...
cn.wizzer.app:wk-nb-web-platform (>=5.1.5, <=5.2.5), cn.wizzer.app:wk-nb-web-vue (>=5.1.5, <=5.2.5) +11 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.9.8)
com.ibeetl:beetl MAVEN version 2.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - cn.wizzer.app:wk-nb-web-platform =5.1.5, =5.1.5, =2.1.0, =0.1.2, =1.1.72.release, =0.3.4, =0.2.0, =1.8.18.0, =2.3.0.v20190220,...
cn.xphsc:xpack-maven-plugin (>=1.0.0, <=1.0.1), com.blinkfox:jpack-maven-plugin (>=1.0.0, <=1.5.4) +19 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.9.9)
com.ibeetl:beetl MAVEN version 2.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - cn.xphsc:xpack-maven-plugin =1.0.0, =1.0.0, =1.0.0-rc, =1.1.77.release, =1.2.8, =1.3.7, =1.3.7, =1.0.9, =1.0.9, =1.0.9, =1.0.9,...
cc.hiver:hiver-core (>=1.0, <=1.0.4), cn.wizzer.app:wk-nb-web-platform (5.2.6) +10 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.9.10)
com.ibeetl:beetl MAVEN version 2.9.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - cc.hiver:hiver-core =1.0, =4.0.0, =3.6.1, =4.0.1, =2.3.6.v20190621, =2.3.6.v20190621, =2.3.6.v20190621, =2.3.9.v20200309 Sourc...
club.zhcs:generator (2.3.3.release), cn.dgchong.maven:yapi-smart-doc-maven-plugin (0.0.3) +160 more potentially affected by CVE-2023-30331 via com.ibeetl:beetl (>=3.0.0.m1, <=3.15.0.release)
com.ibeetl:beetl MAVEN version =3.0.0.m1, =3.0.m1, =0.1.2, =7.1.0.final, =5.2.7-nacos, =5.2.7-nacos, =0.6.2, =9.5, =2.0.2, =2.3.2-0.0.1, =1.0.0, =1.0.1-release and more Source cves: CVE-2023-30331 Source advisory: OSV:GHSA-M69H-4FRQ-VWQ7...
com.ibeetl:beetlsql (>=1.0.0, <=1.4.0) potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.2.5)
com.ibeetl:beetl MAVEN version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - com.ibeetl:beetlsql =1.0.0, =1.4.0 Source cves: CVE-2023-30331 Source advisory: OSV:GHSA-M69H-4FRQ-VWQ7...
net.dreamlu:jfinal-assets (>=0.0.1, <=1.3.0) potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.2.6)
com.ibeetl:beetl MAVEN version 2.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - net.dreamlu:jfinal-assets =0.0.1, =1.3.0 Source cves: CVE-2023-30331 Source advisory: OSV:GHSA-M69H-4FRQ-VWQ7...
cn.eova:eova (>=1.5.0, <=1.6-beta1) potentially affected by CVE-2023-30331 via com.ibeetl:beetl (2.4.3)
com.ibeetl:beetl MAVEN version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.ibeetl:beetl and may be impacted: - cn.eova:eova =1.5.0, =1.6-beta1 Source cves: CVE-2023-30331 Source advisory: OSV:GHSA-M69H-4FRQ-VWQ7...
