XiandafuCVEs & Vulnerabilities

1 CVEs affecting Xiandafu products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

beetl 1

CVE-2024-22533CRITICAL

Before Beetl v3.15.12, the rendering template has a server-side template injection (SSTI) vulnerability. When the incoming template is controllable, it will be filtered by the DefaultNativeSecurityManager blacklist. Because blacklist filtering is not strict, the blacklist can be bypassed, leading to arbitrary code execution.

2 Feb 2024

9.8

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database