Skip to content
OpenAdvisories

Vendor

ballcat-projects

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    Command Injection in Ballcat Codegen

    Ballcat Codegen provides the function of online editing code to generate templates. In versions prior to 1.0.0.beta.2, attackers can implement remote code execution through malicious code injection of the template engine. This happens because Velocity and fre…