Apache Velocity Engine (Apache Software Foundation) - vulnerabilities (CVEs)
1 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2021-03-10. Vendor: Apache Software Foundation.
CVEs of Apache Velocity Engine
- CVE-2020-13936 - CVSS 8.8 (high), 2021-03-10: An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account…