Summary
Alvaro Munoz discovered that Velocity Engine incorrectly handled certain
inputs. If a user or an automated system were tricked into opening a specially
crafted input file, a remote attacker could possibly use this issue to execute
arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | velocity | 1.7-5+deb9u1build0.20.04.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | velocity | 1.7-4ubuntu0.1~esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | velocity | 1.7-5ubuntu0.18.04.1~esm1 |
Vulnerabilities 1
-
High 8.8CVE-2020-13936 EPSS 23%
Velocity Sandbox Bypass
An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/mod…
References
-
report
https://ubuntu.com/security/CVE-2020-13936