Filtered by vendor Hubspot
Subscriptions
Filtered by product Jinjava
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2020-12668 | 1 Hubspot | 1 Jinjava | 2024-11-21 | 6.5 Medium |
| Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context. This could allow for abuse of the application class loader, including Arbitrary File Disclosure. | ||||
| CVE-2018-18893 | 1 Hubspot | 1 Jinjava | 2024-11-21 | N/A |
| Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java. | ||||
Page 1 of 1.