Re: CVE-2020-13959: Velocity Tools XSS Vulnerability
"Bolz, Michael" <[email protected]> Thu, 18 Mar 2021 07:20:45 +0000
| Newsgroups | gmane.comp.jakarta.velocity.user |
|---|---|
| Message-ID | <[email protected]> |
SGkgxYF1a2FzeiwNCg0KVGhhbmtzIGEgbG90IGZvciB5b3VyIGFuc3dlci4NCg0KVW5mb3J0dW5h dGVseSB3ZSBoYXZlIG5vdCB0aGUgb3B0aW9uIHRvIGVhc2lseSB1cGRhdGUgdG8gdGhlIG5ldyBh cnRpZmFjdHMuDQpBcyB3ZSBnZXQgVmVsb2NpdHkgMS43IGFzIGEgdHJhbnNpdGl2ZSBkZXBlbmRl bmN5Lg0KRXZlbiBpZiB3ZSBleGNsdWRlIHRoZSBvbGQgMS43IHZlcnNpb24gYW5kIGFkZCB0aGUg Mi4zIHZlcnNpb24gd2UgZXhwZWN0IHByb2JsZW1zIGJhc2VkIG9uIHRoZSBiZWhhdmlvdXIgYW5k IEFQSSBjaGFuZ2VzIG1lbnRpb25lZCBbMV0uDQoNCkhlbmNlLCB3ZSB0cnkgdG8gdW5kZXJzdGFu ZCBpZiBWZWxvY2l0eSAxLjcgaXMgYWZmZWN0ZWQgYnkgdGhlIENWRS0yMDIwLTEzOTU5IHZ1bG5l cmFiaWxpdHkuDQpBdCBsZWFzdCBjdXJyZW50bHkgaXQgbG9va3MgbGlrZSBpdCBpcyBhZmZlY3Rl ZCwgYXMgdGhlIDIueCBhbmQgMS54IGhhcyB0aGUgc2FtZSBjb2RlYmFzZSAoYXMgZmFyIGFzIEkg dW5kZXJzdGFuZCkuDQoNCktpbmQgUmVnYXJkcywgTWljaGFlbCANCg0KWzFdOiBodHRwOi8vdmVs b2NpdHkuYXBhY2hlLm9yZy9lbmdpbmUvMi4zL3VwZ3JhZGluZy5odG1sI3VwZ3JhZGluZy1mcm9t LXZlbG9jaXR5LTE3LXRvLXZlbG9jaXR5LTIwDQoNCj4gT24gMTguIE1hciAyMDIxLCBhdCAwNzow NCwgTHVrYXN6IExlbmFydCA8bHVrYXN6bGVuYXJ0QGFwYWNoZS5vcmc+IHdyb3RlOg0KPiANCj4g Y3p3LiwgMTggbWFyIDIwMjEgbyAwNTo0OCBCb2x6LCBNaWNoYWVsIDxtaWNoYWVsLmJvbHpAc2Fw LmNvbT4gbmFwaXNhxYIoYSk6DQo+PiBJIHRyeSB0byBmaW5kIG91dCBpZiB0aGlzIENWRS0yMDIw LTEzOTU5IGFsc28gYWZmZWN0IHRoZSBvbGRlciBWZWxvY2l0eSAxLjcgdmVyc2lvbi4NCj4+IA0K Pj4+ICAgIDxncm91cElkPm9yZy5hcGFjaGUudmVsb2NpdHk8L2dyb3VwSWQ+DQo+Pj4gICAgPGFy dGlmYWN0SWQ+dmVsb2NpdHk8L2FydGlmYWN0SWQ+DQo+Pj4gICAgPHZlcnNpb24+MS43PC92ZXJz aW9uPg0KPj4gDQo+PiBBcyB3ZSBhcmUgdXNpbmcgZGVwZW5kZW5jaWVzIHdoaWNoIHJlcXVpcmUg dGhpcyBvbGQgVmVsb2NpdHkgdmVyc2lvbi4NCj4+IFVuZm9ydHVuYXRlbHkgdGhlIENWRSBkZXNj cmlwdGlvbiBvbiBOVkQgaXMgbm90IGNsZWFyIGFib3V0IHRoaXMuDQo+PiBGdXJ0aGVybW9yZSBJ IHRyaWVkIHRvIGNoZWNrIGl0IGJ5IG15c2VsZiBiYXNlZCBvbiB0aGUgR2l0SHViIHJlcG8sIGJ1 dCB3YXMgbm90IHN1Y2Nlc3NmdWwuDQo+PiANCj4+IEl0IHdvdWxkIGJlIHZlcnkga2luZCBpZiBz b21lb25lIGNvdWxkIGhlbHAgbWUuDQo+IA0KPiBBcnRpZmFjdHMgYW5kIEdyb3VwSURzIGhhdmUg Y2hhbmdlZCBzb21ldGltZSBhZ28sIHNlZSBbMV1bMl1bM10sIHNvDQo+IHlvdSBtdXN0IG1pZ3Jh dGUgdG8gdGhlIG5ldyBBcnRpZmFjdHMgYXJlIHRoZXJlIHNvbWUgY29kZSBjaGFuZ2VzIHRoYXQN Cj4gbmVlZCB0byBiZSBhcHBsaWVkIChpZiB5b3UgaGF2ZSBhIGJ5LWNvZGUgaW50ZWdyYXRpb24p DQo+IA0KPiBCZWZvcmUNCj4gWzFdIGh0dHBzOi8vZ2l0aHViLmNvbS9hcGFjaGUvc3RydXRzL2Js b2Ivc3RydXRzLTItNS14L3BvbS54bWwjTDY1OS1MNjg1DQo+IE5vdw0KPiBbMl0gaHR0cHM6Ly9n aXRodWIuY29tL2FwYWNoZS9zdHJ1dHMvYmxvYi9tYXN0ZXIvcG9tLnhtbCNMNzMyLUw3NDkNCj4g TWlncmF0aW9uDQo+IFszXSBodHRwczovL2dpdGh1Yi5jb20vYXBhY2hlL3N0cnV0cy9wdWxsLzM5 NA0KPiANCj4gDQo+IFJlZ2FyZHMNCj4gLS0gDQo+IMWBdWthc3oNCj4gKyA0OCA2MDYgMzIzIDEy MiBodHRwOi8vd3d3LmxlbmFydC5vcmcucGwvDQo+IA0KPiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gVG8gdW5z dWJzY3JpYmUsIGUtbWFpbDogdXNlci11bnN1YnNjcmliZUB2ZWxvY2l0eS5hcGFjaGUub3JnDQo+ IEZvciBhZGRpdGlvbmFsIGNvbW1hbmRzLCBlLW1haWw6IHVzZXItaGVscEB2ZWxvY2l0eS5hcGFj aGUub3JnDQo+IA0KDQo= DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0NClRvIHVuc3Vic2NyaWJlLCBlLW1haWw6IHVzZXItdW5zdWJz Y3JpYmVAdmVsb2NpdHkuYXBhY2hlLm9yZw0KRm9yIGFkZGl0aW9uYWwgY29tbWFuZHMsIGUt bWFpbDogdXNlci1oZWxwQHZlbG9jaXR5LmFwYWNoZS5vcmcNCg0K