attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container

{
  "id": "1fd5cf8523d74503a9a5d11f3f5e6342f8e32bf4eb6d3efdc1ef423768056e30",
  "url": "https://osv.dev/vulnerability/CLEANSTART-2026-JU40621",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container",
    "summary": "Security vulnerability affects the apache-hive package. An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container.",
    "evidence": "osv:CLEANSTART-2026-JU40621",
    "products": [
      {
        "name": {
          "value": "apache-hive",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.1.3-r3",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "high",
    "structured": {
      "id": "CLEANSTART-2026-JU40621",
      "aliases": [
        "CLEANSTART-2026-JU40621"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "3.1.3-r3"
                }
              ]
            }
          ],
          "package": {
            "name": "apache-hive",
            "purl": "pkg:apk/cleanstart/apache-hive",
            "ecosystem": "CleanStart"
          },
          "database_specific": {
            "source": "https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-JU40621.json"
          }
        }
      ],
      "modified": "2026-10-08T16:47:08.927682099Z",
      "provider": "osv",
      "upstream": [
        "CVE-2020-13936"
      ],
      "references": [
        "https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-JU40621.json",
        "https://osv.dev/vulnerability/CVE-2020-13936",
        "https://nvd.nist.gov/vuln/detail/CVE-2020-13936"
      ],
      "provider_metadata": {}
    },
    "related_cves": [
      {
        "value": "CVE-2020-13936",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 101955,
  "published_at": "2026-10-08T00:55:31.009+00:00"
}