Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2024/07/18 12:30 p.m.22 views

Apache StreamPark: FreeMarker SSTI RCE Vulnerability

On versions before 2.1.4, a user could log in and perform a template injection attack resulting in Remote Code Execution on the server, The attacker must successfully log into the system to launch an attack, so this is a moderate-impact vulnerability. Mitigation: all users should upgrade to 2.1.4...

8.8CVSS7.5AI score0.01239EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder