-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
JavaJava| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| com.ibeetl:beetl | maven | <= 3.15.0.RELEASE |
Miggo AIRoot Cause AnalysisThe vulnerability stems from two key points: 1) DefaultNativeSecurityManager's permit method only blocks specific java.lang classes but allows reflection to bypass these restrictions, as demonstrated in the POC using Class.forName() to access ScriptEngineManager. 2) The template rendering function (render) serves as the injection vector that processes attacker-controlled templates without preventing the execution of arbitrary Java code via these bypassed reflection paths. The combination of these two functions creates the SSTI vulnerability.
Ongoing coverage of React2Shell