CVE-2023-30331

描述

An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection (SSTI) via a crafted payload.

受影響套件(1)

• Maven/com.ibeetl:beetlfrom 0, <= 3.15.0.RELEASE

CVSS 分數

參考連結(4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-30331
• PATCHhttps://github.com/javamonkey/beetl2.0
• WEBhttps://gitee.com/xiandafu/beetl/issues/I6RUIP
• WEBhttps://github.com/luelueking/Beetl-3.15.0-vuln-poc