Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Pebble Templates 3.1.2 allows attackers to bypass a protection mechanism (intended to block access to instances of java.lang.Class) because getClass is accessible via the public static java.lang.Class java.lang.Class.forName(java.lang.Module,java.lang.String) signature.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Pebble Templates 输入验证错误漏洞
Vulnerability Description
Pebble Templates是一款Java模板引擎。 Pebble Templates 3.1.2版本中存在安全漏洞。攻击者可借助公共静态java.lang.Class java.lang.Class.forName(java.lang.Module,java.lang.String)签名利用该漏洞绕过保护机制(阻止对java.lang.Class实例的访问)。
CVSS Information
N/A
Vulnerability Type
N/A