restlet/restlet-framework-java — Issue #13: Update Freemarker to 2.3.19 to get security fix
Author: ansell
Created: 2012-03-01 20:29:11+00:00
State: open

Freemarker released a new version yesterday which has some urgent fixes, depending on the setup. From the description it is not inconceivable that the freemarker plugin could be used in one of those ways, although not directly. The extensions ContextTemplateLoader may also be vulnerable.

http://freemarker.sourceforge.net/docs/versions_2_3_19.html