CVE-2018-18893

CVE-2018-18893 affects Jinjava up to version 2.4.5; the vulnerability arises because JinjavaBeanELResolver does not block getClass, enabling potential attacker-controlled object types to influence evaluation. Public references (GHSA, OSV, Veracode) describe risks of remote code execution or arbit...