CVE-2023-30331

An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection (SSTI) via a crafted payload.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.93% chance of exploitation in the next 30 days, 60th percentile

Published

2023-05-04

Updated

2025-01-29

Proof-of-concept exploits (1)

• luelueking/Beetl-3.15.0-vuln-poc7★ · 2023-03-31

Security advisories

• https://gitee.com/xiandafu/beetl/issues/I6RUIP
• advisories/GHSA-m69h-4frq-vwq7

References

• CVE Record
• NVD entry

Related

• CVE-2022-25845
• CVE-2022-39197
• CVE-2022-4566
• CVE-2023-25194
• CVE-2023-27821