{"id":"CVE-2020-26282","aliases":["GHSA-wmfg-55f9-j8hq"],"url":"https://o3.security/vulnerability/CVE-2020-26282","summary":"Server-Side Template Injection","details":"### Impact\nA Server-Side Template Injection was identified in BrowserUp Proxy enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code Execution (RCE) vulnerability. This has been assigned CVE-2020-26282.\n\n### Patches\nEffective Immediately, all users should upgrade to version 2.1.2 or higher.\n\n### Workarounds\nNone. \n\n### References\nhttps://securitylab.github.com/research/bean-validation-RCE\n\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [the BrowserUp Proxy repo](http://github.com/browserup/browserup-proxy)\n* Contact us via  the [BrowserUp website](https://browserup.com) or email us at [support@browserup.com](mailto:support@browserup.com)","published":"2020-12-24T21:15:12.727Z","modified":"2026-07-09T01:07:08.057499Z","cvss":{"score":10,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"Maven","name":"com.browserup:browserup-proxy","fixedVersion":"2.1.2"}],"fix":{"url":"https://github.com/browserup/browserup-proxy/commit/4b38e7a3e20917e5c3329d0d4e9590bed9d578ab","label":"browserup/browserup-proxy@4b38e7a"},"references":[{"type":"ADVISORY","url":"https://github.com/browserup/browserup-proxy/releases/tag/v2.1.2"},{"type":"ADVISORY","url":"https://github.com/browserup/browserup-proxy/security/advisories/GHSA-wmfg-55f9-j8hq"},{"type":"FIX","url":"https://github.com/browserup/browserup-proxy/commit/4b38e7a3e20917e5c3329d0d4e9590bed9d578ab"},{"type":"EVIDENCE","url":"https://securitylab.github.com/research/bean-validation-RCE"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-26282"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-09T01:07:08.057499Z"}}