CVE-2020-12668: Hubspot Jinjava

Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days.

Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context. This could allow for abuse of the application class loader, including Arbitrary File Disclosure.

Affected products

• Hubspot Jinjava: before 2.5.4 (fixed in 2.5.4)

Published 2021-02-19. Last modified 2026-06-17.