Velocity Engine (Apache) - vulnerabilities (CVEs)

1 CVEs, 0 in the last 30 days, 11 known versions, newest CVE from 2021-03-10. Vendor: Apache.

CVEs of Velocity Engine

• CVE-2020-13936 - CVSS 8.8 (high), 2021-03-10: An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account…