Summary
Jackson Henry discovered that Velocity Tools incorrectly handled certain
inputs. If a user or an automated system were tricked into opening a specially
crafted input file, a remote attacker could possibly use this issue to execute
arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | velocity-tools | 2.0-7ubuntu0.20.04.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | velocity-tools | 2.0-4ubuntu0.1~esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | velocity-tools | 2.0-7ubuntu0.18.04.1~esm1 |
Vulnerabilities 1
-
Medium 6.1
Velocity Tools XSS Vulnerability
The default error page for VelocityView in Apache Velocity Tools prior to 3.1 reflects back the vm file that was entered as part of the URL. An attacker can set an XSS payload file as this vm file in the URL which results in this payload being executed. XSS v…
References
-
report
https://ubuntu.com/security/CVE-2020-13959