Dropwizard Validation (Dropwizard) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 160 known versions, newest CVE from 2020-04-10. Vendor: Dropwizard.

CVEs of Dropwizard Validation

• CVE-2020-11002 - CVSS 8.8 (high), 2020-04-10: dropwizard-validation before versions 2.0.3 and 1.3.21 has a remote code execution vulnerability. A server-side template injection was identified in the…
• CVE-2020-5245 - CVSS 8.8 (high), 2020-02-24: Dropwizard-Validation before 1.3.19, and 2.0.2 may allow arbitrary code execution on the host system, with the privileges of the Dropwizard service account,…