Skip to content
Noroxi

pebbletemplates records

3 published records for vendor pebbletemplates.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
66.7%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 19
  2. 22
  3. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

3 records
  • CVE-2022-37767
    39Monitor

    Pebble Templates 3.1.5 allows attackers to bypass a protection mechanism and implement arbitrary code execution with springbok.

    CriticalCVSS 9.8No exploitEPSS 1%

    pebbletemplates · pebble templatesSep 12, 2022

  • CVE-2019-19899
    39Monitor

    Pebble Templates 3.1.2 allows attackers to bypass a protection mechanism (intended to block access to instances of java.lang.Class) because

    CriticalCVSS 9.8No exploitEPSS 1%

    pebbletemplates · pebble templatesDec 18, 2019

  • CVE-2025-1686
    19Monitor

    Versions of the package io.pebbletemplates:pebble from 0 and before 4.1.0 are vulnerable to External Control of File Name or Path via the in

    MediumCVSS 4.8No exploitEPSS 0%

    pebbletemplates · pebble templatesFeb 27, 2025