Hitachi Vantara Pentaho Business Analytics Server prior...
High severity
Unreviewed
Published
Apr 3, 2023
to the GitHub Advisory Database
•
Updated May 20, 2023
Description
Published by the National Vulnerability Database
Apr 3, 2023
Published to the GitHub Advisory Database
Apr 3, 2023
Last updated
May 20, 2023
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain web services to set property values which contain Spring templates that are interpreted downstream.
References