NA – CVE-2021-21244 – OneDev is an all-in-one devops platform. In…

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, There is a vulnerability that enabled pre-auth server side template injection via Bean validation message tampering. Full details in the reference GHSA. This issue was fixed in 4.0.3 by disabling validation interpolation completely.Latest news clusters for enRead More