Lucene search
GoogleOSV:CVE-2019-19999HistoryDec 26, 2019 - 4:15 a.m.
CVE-2019-19999
2019-12-2604:15:10
Google
osv.dev
5
Halo before 1.2.0-beta.1 allows Server Side Template Injection (SSTI) because TemplateClassResolver.SAFER_RESOLVER is not used in the FreeMarker configuration.
| CPE | Name | Operator | Version |
|---|---|---|---|
| halo | eq | 0.1 | |
| halo | eq | 1.0.0-beta.3 | |
| halo | eq | 1.0.0-beta.2 | |
| halo | eq | 1.0.0-beta.5 | |
| halo | eq | 0.0.8 | |
| halo | eq | 0.0.2 | |
| halo | eq | 1.0.0-beta.8 | |
| halo | eq | 0.0.6 | |
| halo | eq | 1.0.2 | |
| halo | eq | 0.1.1 |
Related
cve
cve
CVE-2019-19999
2019-12-26 04:15:10
cvelist
cvelist
CVE-2019-19999
2019-12-26 03:38:03
prion
prion
Design/Logic Flaw
2019-12-26 04:15:00
nvd
nvd
CVE-2019-19999
2019-12-26 04:15:10