jstachio__jstachio_CVE-2023-33962_1-0-0

타입 안전한 Java Mustache 템플릿 엔진입니다. 템플릿은 읽을 수 있는 Java 소스 코드로 컴파일되며 값 바인딩은 정적으로 검사됩니다. 문서 최신 SNAPSHOT JStachio 문서 현재 릴리스된 JStachio 문서 문서는 javadoc.io에도 있지만 위와 같이 집계되지는 않습니다. 집계된 javadoc이 선호되는 문서이며 이 readme의 나머지 부분은 주로 선전 마케팅 목적입니다. 이전 릴리스의 경우: https://jstach.io/doc/jstachio/VERSION/apidocs 여기서 VERSION은...

CVE-2023-33962

JStachio is a type-safe Java Mustache templating engine. Prior to version 1.0.1, JStachio fails to escape single quotes ' in HTML, allowing an attacker to inject malicious code. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of other users...

CVE-2023-33962

CVE-2023-33962 (JStachio) : The vulnerability affects the JStachio Java Mustache templating engine prior to version 1.0.1, where single quotes in HTML are not escaped. This can allow an attacker to inject malicious code and potentially execute arbitrary JavaScript in the context of other users vi...

CVE-2023-33962 JStachio XSS vulnerability: Unescaped single quotes

JStachio is a type-safe Java Mustache templating engine. Prior to version 1.0.1, JStachio fails to escape single quotes ' in HTML, allowing an attacker to inject malicious code. This vulnerability can be exploited by an attacker to execute arbitrary JavaScript code in the context of other users...