CVE-2023-26093

CVE-2023-26093 affects Liima prior to version 1.17.28. The root cause is a Hibernate Query Language (HQL) injection in the deployment filter’s colToSort logic, potentially enabling authenticated or network-based attackers to achieve high-impact outcomes. The provided documents confirm the vulnera...

CVE-2023-26092

Liima up to version 1.17.27 is vulnerable to server-side template injection. The issue arises in Liima’s templating flow and can lead to arbitrary code execution or access to sensitive data as indicated by the CVE details (high impact). Remediation: upgrade to Liima 1.17.28 or later (the fixed ve...