Lucene search
Veracode Vulnerability DatabaseVERACODE:37062HistorySep 16, 2022 - 11:57 a.m.
Arbitrary Code Execution Via Authorization Bypass
2022-09-1611:57:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
27
pebble templates
arbitrary code execution
authorization bypass
blacklistmethodaccessvalidator
software security
0.003 Low
EPSS
Percentile
71.3%
Pebble Templates is vulnerable to arbitrary code execution via authorization bypass. The vulnerability exists in BlacklistMethodAccessValidator.java because the methods that are allowed to access by pebble are not properly handled which allows an attacker to bypass and execute arbitrary codes.
Related
prion
prion
Input validation
2022-09-12 14:15:00
cve
cve
CVE-2022-37767
2022-09-12 14:15:09
osv
osv
nvd
nvd
CVE-2022-37767
2022-09-12 14:15:09
cvelist
cvelist
CVE-2022-37767
2022-09-12 00:00:00
github
github