Critical · 9.8 CVE-2023-30331 EUVD-2023-1575GHSA-m69h-4frq-vwq7

Server-side template injection in beetl

Published May 4, 2023 · Updated Jan 29, 2025 · Assigned by mitre

Description

An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection (SSTI) via a crafted payload.

Ecosystem	Package	Affected	Fixed	Record
Maven	com.ibeetl:beetl	<= 3.15.0.RELEASE	—	GHSA-m69h-4frq-vwq7