Lucene search
Veracode Vulnerability DatabaseVERACODE:28824HistoryDec 28, 2020 - 4:31 a.m.
Remote Code Execution (RCE)
2020-12-2804:31:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.056 Low
EPSS
Percentile
93.3%
BrowserUp Proxy is vulnerable to remote code execution. An attacker is able to exploit the vulnerability by injecting arbitrary Java EL expressions into the server-side template.
| CPE | Name | Operator | Version |
|---|---|---|---|
| browserup-proxy | le | 2.1.1 |
Related
veracode
veracode
Server-Side Template Injection
2020-12-28 02:02:36
cvelist
cvelist
CVE-2020-26282 Template Injection in BrowserUp Proxy
2020-12-24 20:45:18
osv
osv
CVE-2020-26282
2020-12-24 21:15:12
Server-Side Template Injection
2020-12-24 20:49:34
cve
cve
CVE-2020-26282
2020-12-24 21:15:12
prion
prion
Remote code execution
2020-12-24 21:15:00
nvd
nvd
CVE-2020-26282
2020-12-24 21:15:12
github
github
Server-Side Template Injection
2020-12-24 20:49:34