Description
Valine v1.4.18 was discovered to contain a remote code execution (RCE) vulnerability which allows attackers to execute arbitrary code via a crafted POST request.
Remediation
References
https://github.com/xCss/Valine/issues/400
Related Vulnerabilities
CVE-2021-40110 Vulnerability in maven package org.apache.james:james-server
CVE-2020-8203 Vulnerability in maven package org.webjars.npm:lodash
CVE-2021-46708 Vulnerability in npm package swagger-ui-dist
CVE-2023-45277 Vulnerability in maven package org.yamcs:yamcs-core
CVE-2015-0266 Vulnerability in maven package org.apache.ranger:ranger