Lucene search
PRIOn knowledge basePRION:CVE-2019-19999HistoryDec 26, 2019 - 4:15 a.m.
Design/Logic Flaw
2019-12-2604:15:00
PRIOn knowledge base
www.prio-n.com
2
Halo before 1.2.0-beta.1 allows Server Side Template Injection (SSTI) because TemplateClassResolver.SAFER_RESOLVER is not used in the FreeMarker configuration.
| CPE | Name | Operator | Version |
|---|---|---|---|
| halo | eq | 1.2.0 beta1 | |
| halo | eq | 1.1.3 beta1 | |
| halo | eq | 1.1.3 beta2 | |
| halo | le | 1.1.1 |
Related
cve
cve
CVE-2019-19999
2019-12-26 04:15:10
osv
osv
CVE-2019-19999
2019-12-26 04:15:10
cvelist
cvelist
CVE-2019-19999
2019-12-26 03:38:03
nvd
nvd
CVE-2019-19999
2019-12-26 04:15:10