Skip to content

org.xwiki.commons:xwiki-commons-velocity vulnerabilities (Maven)

2 vulnerabilities.

org.xwiki.commons:xwiki-commons-velocity MavenXWiki Commons missing escaping of `{` in Velocity escapetool allows remote code executionCVE-2024-31996Fix available10.0 CriticalApril 10, 2024
org.xwiki.commons:xwiki-commons-velocity MavenArbitrary filesystem write access from VelocityCVE-2022-24897Public exploitFix available7.5 HighApril 28, 2022