Skip to content
OpenAdvisories

Package · Maven

org.lucee:lucee

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2023-38693

    RCE in Lucee REST endpoint

    Lucee Server (or simply Lucee) is a dynamic, Java based, tag and scripting language used for rapid web application development. The Lucee REST endpoint is vulnerable to RCE via an XML XXE attack. This vulnerability is fixed in Lucee 5.4.3.2, 5.3.12.1, 5.3.7.5…

    lucee Lucee org.lucee:lucee Maven