CVE-2020-11002

CVE-2020-11002 affects Dropwizard-validation prior to 1.3.21 and 2.0.3, where a server-side template injection in the self-validating feature enables injection of arbitrary Java EL expressions, leading to Remote Code Execution (RCE). Affected: dropwizard-validation versions before 1.3.21 and 2.0....

CVE-2020-5245

Technical specifics for CVE-2020-5245 (affected software, root cause, impact, and fix) are provided in the Initial document; there are no additional concrete details about this CVE in the Connected documents.