Lucene search
MitreCVELIST:CVE-2024-22533HistoryFeb 02, 2024 - 12:00 a.m.
CVE-2024-22533
2024-02-0200:00:00
mitre
www.cve.org
cve-2024-22533
server-side template injection
arbitrary code execution
blacklist filtering
Before Beetl v3.15.12, the rendering template has a server-side template injection (SSTI) vulnerability. When the incoming template is controllable, it will be filtered by the DefaultNativeSecurityManager blacklist. Because blacklist filtering is not strict, the blacklist can be bypassed, leading to arbitrary code execution.
References
Related
cve
cve
CVE-2024-22533
2024-02-02 03:15:11
prion
prion
Sql injection
2024-02-02 03:15:00
osv
osv
Beetl Server-Side Template Injection vulnerability
2024-02-02 03:30:32
nvd
nvd
CVE-2024-22533
2024-02-02 03:15:11
github
github
Beetl Server-Side Template Injection vulnerability
2024-02-02 03:30:32
veracode
veracode
Server-Side Template Injection
2024-02-05 07:52:37