Components Vulnerabilities Pricing MCP API

org.everit.osgi.bundles/org.everit.osgi.bu… | Sonatype Guide

org.everit.osgi.bundles

org.everit.osgi.bundles.org.thymeleaf.thymeleaf

2.1.3.RELEASE

org.everit.osgi.bundles.org.thymeleaf.thymeleaf 2.1.3.RELEASE

Latest

org.everit.osgi.bundles

PublishedJun 25, 2014•Policy

compliance

Developer Trust Score

N/A

Recommended Version:x.y.z

Latest version with 0 known vulnerabilities that meets your policy.

Compare Versions

Severity

Critical (0)

High (1)

Medium (0)

Low (0)

CVSS Score

0.010.0

EPSS Score

0.01.0

Malware

KEV StatusPublished

7.5CVE-2023-38286

Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier is enabled and there is write access to environment variables via the UI.

PublishedJul 14, 2023