CVE-2018-18893

Publication date

2019-01-03 01:00:00

Family

mitre

State

PUBLISHED

Description

Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java.