CVE-2018-18893

Published January 3rd, 2019

View on NVD ↗

CVSS v3

N/A

CVSS v2

5

MEDIUM

Affected

1

PROJECT

Description

Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java.

HubSpot/jinjava

Jinja template engine for Java

GitHub

779