[WW-5120] Upgrade Velocity Engine & Velocity Tools - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Dependency
Status: Closed
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 6.0.0
Component/s: Plugin - Velocity
Labels:
None

Description

Velocity Engine has known vulnerability:
CVE-2020-13936: Velocity Sandbox Bypass

Velocity Tools has known vulnerability:
CVE-2020-13959: Velocity Tools XSS Vulnerability

Attachments

Activity

People

Assignee:: Unassigned

Reporter:: Lukasz Lenart

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Created:: 15/Mar/21 07:35

Updated:: 14/Jun/22 09:47

Resolved:: 15/Mar/21 07:40