CVE-2020-17532

The CVE-2020-17532 entry affects Apache ServiceComb-Java-Chassis when the handler-router component is enabled. An authenticated user can inject data and trigger arbitrary code execution. Affected versions are 2.0.0 through 2.1.3; the issue is fixed in 2.1.5. Evidence in multiple sources corrobora...