Количество 3
Количество 3
CVE-2026-38165
A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocreport v0.9.2 to v2.2.0 allows attackers to execute arbitrary code via a crafted expression.
CVE-2026-38165
A Server-Side Template Injection (SSTI) vulnerability in the Velocity ...
GHSA-7747-6373-9653
A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocreport v0.9.2 to v2.2.0 allows attackers to execute arbitrary code via a crafted expression.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-38165 A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocreport v0.9.2 to v2.2.0 allows attackers to execute arbitrary code via a crafted expression. | 0% Низкий | 1 день назад | |
| CVE-2026-38165 A Server-Side Template Injection (SSTI) vulnerability in the Velocity ... | 0% Низкий | 1 день назад | |
| GHSA-7747-6373-9653 A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocreport v0.9.2 to v2.2.0 allows attackers to execute arbitrary code via a crafted expression. | CVSS3: 9.8 | 0% Низкий | 1 день назад |
Уязвимостей на страницу