...
Code Block | ||||||
---|---|---|---|---|---|---|
| ||||||
<repositories> <repository> <id>apache.nexus</id> <name>ASF Nexus Staging</name> <url>https://repository.apache.org/content/groups/staging/</url> </repository> </repositories> |
Internal Changes
- Forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution, read more details in S2-029
- Possible RCE vulnerability in
XSLTResult
was fixed, read more details in S2-031 - Prevents execution of chained expressions based on new
isSequence
flag introduce in appropriated OGNL versions, it's related to S2-032
...