PT-2025-4773 · Jte · Jte

Petersoj

·

Published

2025-01-13

·

Updated

2025-01-14

·

CVE-2025-23026

CVSS v3.1

6.1

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions jte (Java Template Engine) versions 3.1.15 and earlier
Description The issue affects Jte HTML templates with script tags or script attributes that include a Javascript template string (backticks), making them subject to XSS. The javaScriptBlock and javaScriptAttribute methods in the Escape class do not escape backticks, which are used for Javascript template strings. Dollar signs in template strings should also be escaped to prevent undesired interpolation. HTML templates rendered by Jte's OwaspHtmlTemplateOutput in versions less than or equal to 3.1.15 with script tags or script attributes that contain Javascript template strings (backticks) are vulnerable.
Recommendations To resolve this issue, users are advised to upgrade to version 3.1.16 or later. As a temporary workaround, consider disabling the javaScriptBlock and javaScriptAttribute methods in the Escape class until a patch is available. Restrict access to the OwaspHtmlTemplateOutput module to minimize the risk of exploitation. Avoid using the script tags or script attributes that contain Javascript template strings (backticks) in the affected API endpoint until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-150CWE-79

Related Identifiers

CVE-2025-23026
GHSA-VH22-6C6H-RM8Q

Affected Products

Jte