Vulnerabilities

TI-2026-07698 CVE-2026-8759 · GHSA-fmmw-44rp-jcfp

xiandafu beetl SpELFunction SpELFunction.java expression language injection

HIGH 66

A vulnerability was identified in xiandafu beetl up to 3.20.2.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00406 Published 2026-05-17 No fix listed CWE-20

TI-2024-15055 CVE-2024-22533 · GHSA-9gh8-877r-g477

MEDIUM 45

Before Beetl v3.15.12, the rendering template has a server-side template injection (SSTI) vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01028 Published 2024-02-02 Fixed in 3.15.13.RELEASE CWE-94

TI-2022-03980 CVE-2022-4347 · GHSA-xx93-36xf-3332

MEDIUM 58

A vulnerability was found in xiandafu beetl-bbs.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00416 Published 2022-12-08 No fix listed CWE-707