Remote Code Execution
Affecting com.hubspot.jinjava: jinjava artifact, versions [,2.4.6)
com.hubspot.jinjava: jinjava is a Java-based template engine based on django template syntax, adapted to render jinja templates (at least the subset of jinja in use in HubSpot content).
Affected versions of this package are vulnerable to Remote Code Execution
com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java path. It was possible to call the
getClass() method on any object.
com.hubspot.jinjava: jinjava to version 2.4.6 or higher.