CVE-2018-18893

Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java.

Score

CVSS 3.0 5.3 Medium

Status

Modified - cve@mitre.org

Published

2019-01-03

Last modified

2024-08-05

Affected products

• Jinjava (Hubspot)

References

• https://github.com/HubSpot/jinjava/blob/master/CHANGES.md
• https://github.com/HubSpot/jinjava/pull/230