{"id":"CVE-2023-30331","aliases":["EUVD-2023-1575","GHSA-m69h-4frq-vwq7"],"status":"published","title":"Server-side template injection in beetl","description":"An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection (SSTI) via a crafted payload.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00926,"percentile":0.60776,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2023-05-04T00:00:00Z","modified":"2026-06-17T05:54:30Z","affected":[{"source":"ghsa","ecosystem":"Maven","package":"com.ibeetl:beetl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.15.0.RELEASE"}]}]},{"source":"osv","ecosystem":"Maven","package":"com.ibeetl:beetl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"3.15.0.RELEASE"}]}],"versions":["2.2.10","2.2.11","2.2.12","2.2.13","2.2.14","2.2.15-snapshot","2.2.5","2.2.6","2.2.7","2.2.7-snapshot","2.2.8","2.2.9","2.3.0","2.3.1","2.3.2","2.4.0","2.4.1","2.4.2","2.4.3","2.4.4","2.4.5","2.5.0","2.5.1","2.5.2","2.5.3","2.7.0","2.7.1","2.7.10","2.7.11","2.7.12","2.7.13","2.7.14","2.7.15","2.7.16","2.7.17","2.7.18","2.7.19","2.7.2","2.7.20","2.7.21","2.7.22","2.7.23","2.7.24","2.7.25","2.7.26","2.7.27","2.7.28","2.7.3","2.7.5","2.7.6","2.7.7","2.7.8","2.7.9","2.8.0","2.8.1","2.8.2","2.8.3","2.8.4","2.8.5","2.8.6","2.8.7","2.9.0","2.9.1","2.9.10","2.9.2","2.9.3","2.9.4","2.9.5","2.9.6","2.9.7","2.9.8","2.9.9","3.0.0.M1","3.0.0.M2","3.0.0.M3","3.0.0.M4","3.0.0.RELEASE","3.0.1.RELEASE","3.0.10.RELEASE","3.0.11.RELEASE","3.0.12.RELEASE","3.0.13.RELEASE","3.0.14.RELEASE","3.0.15.RELEASE","3.0.16.RELEASE","3.0.17.RELEASE","3.0.18.RELEASE","3.0.19.RELEASE","3.0.2.RELEASE","3.0.20.RELEASE","3.0.21.RELEASE","3.0.3.RELEASE","3.0.5.RELEASE","3.0.6.RELEASE","3.0.7.RELEASE","3.0.8.RELEASE","3.0.9.RELEASE","3.1.0.RELEASE","3.1.1.RELEASE","3.1.2.RELEASE","3.1.3.RELEASE","3.1.4.RELEASE","3.1.5.RELEASE","3.1.6.RELEASE","3.1.7.RELEASE","3.1.8.RELEASE","3.10.0.Antlr4.5-RELEASE","3.10.0.RELEASE","3.11.0.RELEASE","3.12.0.RELEASE","3.13.0.RELEASE","3.14.1.RELEASE","3.15.0.RELEASE","3.2.0.RELEASE","3.2.1.RELEASE","3.2.2.RELEASE","3.2.3.RELEASE","3.2.4.RELEASE","3.3.0.RELEASE","3.3.1.RELEASE","3.3.2.RELEASE","3.4.0.RELEASE","3.5.0.RELEASE","3.5.1.RELEASE","3.6.0.RELEASE","3.6.1.RELEASE","3.7.0.RELEASE","3.8.0.RELEASE","3.8.1.RELEASE","3.9.0.RELEASE","3.9.1.RELEASE","3.9.2.RELEASE","3.9.3.RELEASE"]}],"products":[{"vendor":"beetl_project","product":"beetl"}],"references":[{"url":"https://gitee.com/xiandafu/beetl/issues/I6RUIP","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","web"]},{"url":"https://github.com/luelueking/Beetl-3.15.0-vuln-poc","tags":["x_transferred","Exploit","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-30331","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-m69h-4frq-vwq7"},{"url":"https://github.com/javamonkey/beetl2.0","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2023-30331","description":"An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection (SSTI) via a crafted payload.","status":"published","published":"2023-05-04T00:00:00Z","modified":"2025-01-29T19:24:04.083Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"updated_at":"2026-11-02T14:35:22.640346Z"}],"euvd":[{"id":"EUVD-2023-1575","description":"An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection (SSTI) via a crafted payload.","status":"published","published":"2023-05-04T00:00:00Z","modified":"2025-01-29T19:24:04Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T00:04:09.89712Z"}],"ghsa":[{"id":"GHSA-m69h-4frq-vwq7","title":"Server-side template injection in beetl","description":"An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection (SSTI) via a crafted payload.","status":"published","published":"2023-05-04T03:30:22Z","modified":"2023-11-08T05:07:09Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T14:37:17.64478Z"}],"nvd":[{"id":"CVE-2023-30331","description":"An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection (SSTI) via a crafted payload.","status":"published","published":"2023-05-04T03:15:21.267Z","modified":"2026-06-17T05:54:30.423Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"updated_at":"2026-11-02T14:07:59.151142Z"}],"osv":[{"id":"GHSA-m69h-4frq-vwq7","title":"Server-side template injection in beetl","description":"An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection (SSTI) via a crafted payload.","status":"published","published":"2023-05-04T03:30:22Z","modified":"2024-11-29T05:42:29.017157Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:46:51.463834Z"}]}}