medium5.3
CVE-2018-18893
Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java.
Impact
Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hubspot | Jinjava | before 2.4.6 |