Skip to content

Product

debian/velocity vulnerabilities

2 published CVES affecting debian/velocity, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
0
Low
0
Unscored
1
CISA KEV
0

Latest debian/velocity CVEs

Newest publication first

  2. CVE-2020-13936 Velocity Sandbox Bypass

    Published
    HighCVSS 8.8 EPSS 22.7%

    An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/modify velocity template...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.