Package · Maven

org.apache.velocity:velocity-tools

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 6.1

CVE-2020-13959

Velocity Tools XSS Vulnerability

The default error page for VelocityView in Apache Velocity Tools prior to 3.1 reflects back the vm file that was entered as part of the URL. An attacker can set an XSS payload file as this vm file in the URL which results in this payload being executed. XSS v…

Apache Software Foundation Apache Velocity Tools org.apache.velocity:velocity-tools velocity-tools Debian Ubuntu Maven

Mar 10, 2021