CVE-2023-30331

Description

An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection (SSTI) via a crafted payload.

Affected packages (1)

• Maven/com.ibeetl:beetlfrom 0, <= 3.15.0.RELEASE

CVSS scores

References (4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-30331
• PATCHhttps://github.com/javamonkey/beetl2.0
• WEBhttps://gitee.com/xiandafu/beetl/issues/I6RUIP
• WEBhttps://github.com/luelueking/Beetl-3.15.0-vuln-poc