Skip to content
Threat Feed

Product

H2 (2.2.224)

1 brief RSS
high advisory

JDBI Freemarker Template Engine Vulnerability Leads to Remote Code Execution

Jdbi's freemarker module is vulnerable to arbitrary command execution when an application permits attacker-influenced text to reach FreemarkerEngine.parse() as template source, affecting org.jdbi:jdbi3-freemarker through version 3.52.1 and potentially leading to RCE.

jdbi3-freemarker +1 freemarker template-injection rce jdbi
2r 1t