Dropwizard Dropwizard_validation
2 CVEs affecting Dropwizard Dropwizard_validation. Latest disclosed: 2020-04-10. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-11002 | High | 8.0 | 2020-04-10 | dropwizard-validation before versions 2.0.3 and 1.3.21 has a remote code execution vulnerability. A server-side template injection was identified in the self-v… |
CVE-2020-5245 | High | 7.9 | 2020-02-24 | Dropwizard-Validation before 1.3.19, and 2.0.2 may allow arbitrary code execution on the host system, with the privileges of the Dropwizard service account, by… |