CVE-2023-30331 Server-side template injection in beetl
CriticalCVSS 9.8
EPSS 0.93%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection (SSTI) via a crafted payload.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| com.ibeetl/beetl(Maven) | <= 3.15.0.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.2.10 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.2.11 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.2.12 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.2.13 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.2.14 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.2.15-snapshot | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.2.5 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.2.6 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.2.7 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.2.7-snapshot | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.2.8 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.2.9 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.3.0 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.3.1 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.3.2 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.4.0 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.4.1 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.4.2 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.4.3 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.4.4 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.4.5 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.5.0 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.5.1 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.5.2 | No fix listed |
Show 110 more
| Product | Affected versions | Fixed in |
|---|---|---|
| com.ibeetl/beetl(Maven) | = 2.5.3 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.0 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.1 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.10 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.11 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.12 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.13 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.14 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.15 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.16 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.17 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.18 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.19 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.2 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.20 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.21 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.22 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.23 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.24 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.25 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.26 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.27 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.28 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.3 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.5 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.6 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.7 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.8 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.7.9 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.8.0 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.8.1 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.8.2 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.8.3 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.8.4 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.8.5 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.8.6 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.8.7 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.9.0 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.9.1 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.9.10 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.9.2 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.9.3 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.9.4 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.9.5 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.9.6 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.9.7 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.9.8 | No fix listed |
| com.ibeetl/beetl(Maven) | = 2.9.9 | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.0.0.M1 | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.0.0.M2 | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.0.0.M3 | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.0.0.M4 | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.0.0.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.0.1.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.0.10.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.0.11.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.0.12.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.0.13.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.0.14.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.0.15.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.0.16.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.0.17.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.0.18.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.0.19.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.0.2.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.0.20.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.0.21.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.0.3.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.0.5.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.0.6.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.0.7.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.0.8.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.0.9.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.1.0.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.1.1.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.1.2.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.1.3.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.1.4.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.1.5.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.1.6.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.1.7.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.1.8.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.10.0.Antlr4.5-RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.10.0.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.11.0.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.12.0.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.13.0.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.14.1.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.15.0.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.2.0.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.2.1.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.2.2.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.2.3.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.2.4.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.3.0.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.3.1.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.3.2.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.4.0.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.5.0.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.5.1.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.6.0.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.6.1.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.7.0.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.8.0.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.8.1.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.9.0.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.9.1.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.9.2.RELEASE | No fix listed |
| com.ibeetl/beetl(Maven) | = 3.9.3.RELEASE | No fix listed |
| beetl project beetl | = 3.15-0 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- gitee.com exploit issue-tracking third-party-advisory
- github.com exploit third-party-advisory
- github.com
- github.com product