CVE-2018-18893: Medium severity hubspot vulnerability
Published Jan 3, 2019
·Updated
Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java.
Affected Software
1 affected component
HubSpot Jinjava<2.4.6
Remediation
Patch Available
Event History
Jan 3, 2019
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-18893?
CVE-2018-18893 has a medium severity rating.
2
How do I fix CVE-2018-18893?
To fix CVE-2018-18893, upgrade Jinjava to version 2.4.6 or later.
3
What component is affected by CVE-2018-18893?
CVE-2018-18893 affects the Jinjava library version before 2.4.6.
4
What specific method is not blocked in CVE-2018-18893?
CVE-2018-18893 involves the getClass method not being blocked.
5
Who is the vendor of the affected software in CVE-2018-18893?
The vendor of the affected software in CVE-2018-18893 is HubSpot.