2026年9月4日

CVE-2026-38165 [CRITICAL] – A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine conf

未分类

📑 文章目录

A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocreport v0.9.2 to v2.2.0 allows attackers to execute arbitrary code via a crafted expression.

相关文章