Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:17 a.m.10 views

CVE-2025-23026

jte Java Template Engine is a secure and lightweight template engine for Java and Kotlin. In affected versions Jte HTML templates with script tags or script attributes that include a Javascript template string backticks are subject to XSS. The javaScriptBlock and javaScriptAttribute methods in th...

6.1CVSS6.6AI score0.0029EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/13 7:36 p.m.22 views

CVE-2025-23026 HTML templates containing Javascript template strings are subject to XSS in jte

jte Java Template Engine is a secure and lightweight template engine for Java and Kotlin. In affected versions Jte HTML templates with script tags or script attributes that include a Javascript template string backticks are subject to XSS. The javaScriptBlock and javaScriptAttribute methods in th...

6.1CVSS0.0029EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/01/13 7:36 p.m.13 views

CVE-2025-23026 HTML templates containing Javascript template strings are subject to XSS in jte

jte Java Template Engine is a secure and lightweight template engine for Java and Kotlin. In affected versions Jte HTML templates with script tags or script attributes that include a Javascript template string backticks are subject to XSS. The javaScriptBlock and javaScriptAttribute methods in th...

6.1CVSS6.7AI score0.0029EPSS
Exploits0References3
CVE
CVE
added 2025/01/13 7:36 p.m.41 views

CVE-2025-23026

Summary: CVE-2025-23026 affects jte (Java Template Engine)

6.1CVSS6.2AI score0.0029EPSS
Exploits0References3
vulnersOsv
vulnersOsv
added 2025/01/13 4:57 p.m.6 views

ch.helvethink.odoo4java:java-odoo-xml-rpc-plugin (>=0.0.1 <=0.0.6), com.hexagonkt:templates_jte (>=3.6.0 <=3.7.3) +57 more potentially affected by CVE-2025-23026 via gg.jte:jte-runtime (>=1.0.0 <=3.1.15)

gg.jte:jte-runtime MAVEN version =1.0.0, =0.0.1, =3.6.0, =4.0.0-A1, =0.7.0, =0.5.1, =0.7.0, =0.8.0, =0.7.0, =0.14.0, =0.1.1, =0.5.1 and more Source cves: CVE-2025-23026 Source advisory: OSV:GHSA-VH22-6C6H-RM8Q...

6.1CVSS5.8AI score0.0029EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2025/01/13 4:57 p.m.8 views

ch.helvethink.odoo4java:java-odoo-xml-rpc-plugin (>=0.0.1 <=0.0.6), com.hexagonkt:templates_jte (>=3.6.0 <=3.7.3) +52 more potentially affected by CVE-2025-23026 via gg.jte:jte (>=1.0.0 <=3.1.15)

gg.jte:jte MAVEN version =1.0.0, =0.0.1, =3.6.0, =4.0.0-A1, =0.7.0, =0.5.1, =0.7.0, =0.8.0, =0.7.0, =0.1.1, =0.5.1 - eu.aronnax.smartconstraints:smartconstraints-reportaggregate =0.5.1 and more Source cves: CVE-2025-23026 Source advisory: OSV:GHSA-VH22-6C6H-RM8Q...

6.1CVSS5.8AI score0.0029EPSS
Exploits0
Rows per page
Query Builder