GHSA-45r8-3495-x6rm

Source

https://github.com/advisories/GHSA-45r8-3495-x6rm

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2019/01/GHSA-45r8-3495-x6rm/GHSA-45r8-3495-x6rm.json

JSON Data

https://api.test.osv.dev/v1/vulns/GHSA-45r8-3495-x6rm

Aliases

CVE-2018-18893

Published

2019-01-04T17:43:36Z

Modified

2024-12-04T05:40:32.918892Z

Severity

5.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

Jinjava calls getClass

Details

Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java.

Database specific

{
    "github_reviewed": true,
    "severity": "MODERATE",
    "nvd_published_at": null,
    "github_reviewed_at": "2020-06-16T20:57:27Z",
    "cwe_ids": []
}

References

Affected packages

Maven / com.hubspot.jinjava:jinjava

Package

Name: com.hubspot.jinjava:jinjava; View open source insights on deps.dev
Purl: pkg:maven/com.hubspot.jinjava/jinjava

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.6

Affected versions

1.*

1.0.0

1.0.1

1.0.2

1.0.3

1.0.4

1.0.5

1.0.6

1.0.7

1.0.8

1.0.9

2.*

2.0.0

2.0.1

2.0.2

2.0.3

2.0.4

2.0.5

2.0.6

2.0.7

2.0.8

2.0.9

2.0.10

2.0.11-java7

2.1.0

2.1.1

2.1.2

2.1.3

2.1.4

2.1.5

2.1.6

2.1.7

2.1.8

2.1.9

2.1.10

2.1.11

2.1.12

2.1.13

2.1.14

2.1.15

2.1.16

2.1.17

2.1.18

2.1.19

2.2.0

2.2.1

2.2.2

2.2.3

2.2.4

2.2.5

2.2.6

2.2.7

2.2.8

2.2.9

2.2.10

2.3.0

2.3.1

2.3.3

2.3.4

2.3.5

2.3.6

2.4.0

2.4.1

2.4.2

2.4.3

2.4.4

2.4.5