GHSA-45r8-3495-x6rm
Suggest an improvement- Source
- https://github.com/advisories/GHSA-45r8-3495-x6rm
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2019/01/GHSA-45r8-3495-x6rm/GHSA-45r8-3495-x6rm.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/GHSA-45r8-3495-x6rm
- Aliases
-
- CVE-2018-18893
- Published
- 2019-01-04T17:43:36Z
- Modified
- 2024-12-04T05:40:32.918892Z
- Severity
-
- 5.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
- Summary
- Jinjava calls getClass
- Details
-
Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java.
- Database specific
{ "cwe_ids": [], "github_reviewed_at": "2020-06-16T20:57:27Z", "github_reviewed": true, "nvd_published_at": null, "severity": "MODERATE" }- References
Affected packages
Maven / com.hubspot.jinjava:jinjava
Package
- Name
- com.hubspot.jinjava:jinjava
- View open source insights on deps.dev
- Purl
- pkg:maven/com.hubspot.jinjava/jinjava
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.4.6
Affected versions
1.*
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
2.*
2.0.0
2.0.1
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.10
2.0.11-java7
2.1.0
2.1.1
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
2.1.10
2.1.11
2.1.12
2.1.13
2.1.14
2.1.15
2.1.16
2.1.17
2.1.18
2.1.19
2.2.0
2.2.1
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9
2.2.10
2.3.0
2.3.1
2.3.3
2.3.4
2.3.5
2.3.6
2.4.0
2.4.1
2.4.2
2.4.3
2.4.4
2.4.5