Skip to content
OpenAdvisories

Vendor

lucee

5 known vulnerabilities.

Products

Lucee 4 Lucee Server 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2023-38693

    RCE in Lucee REST endpoint

    Lucee Server (or simply Lucee) is a dynamic, Java based, tag and scripting language used for rapid web application development. The Lucee REST endpoint is vulnerable to RCE via an XML XXE attack. This vulnerability is fixed in Lucee 5.4.3.2, 5.3.12.1, 5.3.7.5…

    lucee Lucee org.lucee:lucee Maven