CVE-2020-13936
时间: 2023-09-23 17:07:21 浏览: 59
CVE-2020-13936是Apache Velocity的一个漏洞。根据引用[1]中提供的信息,为了修复这个漏洞,你需要升级你的Apache Velocity库。从引用中可以看出,新的Velocity引擎改名为velocity-engine-core,并且最新的版本是2.3。所以你需要使用以下依赖项来升级你的pom.xml文件:
```xml
<dependency>
<groupId>org.apache.velocity</groupId>
<artifactId>velocity-engine-core</artifactId>
<version>2.3</version>
</dependency>
```
此外,根据引用和引用中的信息,升级到Velocity 2.3还需要JDK 1.8。所以请确保你的项目使用的是JDK 1.8或更高版本。这样就能修复CVE-2020-13936漏洞了。
相关问题
CVE-2020-13249
根据提供的引用内容,没有包含关于CVE-2020-13249的信息。请提供更多相关信息以便我为您提供准确的答案。<span class="em">1</span><span class="em">2</span><span class="em">3</span>
#### 引用[.reference_title]
- *1* *3* [【漏洞通告】Apache DolphinScheduler高危漏洞(CVE-2020-11974、CVE-2020-13922)](https://blog.csdn.net/weixin_45728976/article/details/108537133)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{"utm_source":"vip_chatgpt_common_search_pc_result","utm_medium":"distribute.pc_search_result.none-task-cask-2~all~insert_cask~default-1-null.142^v93^chatsearchT3_2"}}] [.reference_item style="max-width: 50%"]
- *2* [CVE-2020-36179:CVE-2020-36179~82 Jackson-databind SSRF&RCE](https://download.csdn.net/download/weixin_42181545/19185756)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{"utm_source":"vip_chatgpt_common_search_pc_result","utm_medium":"distribute.pc_search_result.none-task-cask-2~all~insert_cask~default-1-null.142^v93^chatsearchT3_2"}}] [.reference_item style="max-width: 50%"]
[ .reference_list ]
CVE-2020-27986
CVE-2020-27986是指SonarQube敏感信息泄露漏洞。根据引用的描述,它是一个Python脚本,用于检测CVE-2020-27986漏洞。具体内容可以在CSDN上查看。<span class="em">1</span><span class="em">2</span><span class="em">3</span>
#### 引用[.reference_title]
- *1* *3* [CVE-2020-27986(SonarQube敏感信息泄露)漏洞复现](https://blog.csdn.net/dreamthe/article/details/121617470)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{"utm_source":"vip_chatgpt_common_search_pc_result","utm_medium":"distribute.pc_search_result.none-task-cask-2~all~insert_cask~default-1-null.142^v93^chatsearchT3_1"}}] [.reference_item style="max-width: 50%"]
- *2* [CVE-2020-36179:CVE-2020-36179~82 Jackson-databind SSRF&RCE](https://download.csdn.net/download/weixin_42181545/19185756)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{"utm_source":"vip_chatgpt_common_search_pc_result","utm_medium":"distribute.pc_search_result.none-task-cask-2~all~insert_cask~default-1-null.142^v93^chatsearchT3_1"}}] [.reference_item style="max-width: 50%"]
[ .reference_list ]