Jinjava Template Rendering Library Code Execution

The vulnerabilities of the functions Introspector.getBeanInfo and PropertyDescriptor.getReadMethod in the jinjava template rendering library are related to the lack of measures taken to eliminate special elements in the template creation mechanism when processing the ForTag parameter. Exploiting...

jinjava Template Rendering Library Code Execution

The vulnerability of the constructFromCanonical function in the jinjava template rendering library is related to the lack of measures taken to neutralize special elements in the template creation mechanism. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...