Package · Maven

org.apache.velocity:velocity-engine-parent

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 8.8

CVE-2020-13936 EPSS 23%

Velocity Sandbox Bypass

An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/mod…

Apache Software Foundation Apache Velocity Engine org.apache.velocity:velocity velocity Debian Ubuntu Maven

Mar 10, 2021