Home >Topic List >Usage of velocity annotation
Usage of velocity annotation
Velocity annotation usage includes adding explanatory text, temporarily removing code snippets, debugging and testing, etc. If you want to know more about the usage of velocity annotations, you can visit the articles below this topic.
Example analysis of Apache Solr velocity template injection RCE vulnerability0x01 Introduction Solr is an independent enterprise-level search application server that provides an API interface similar to Web-service. Users can submit XML files in a certain format to the search engine server through http requests to generate indexes; they can also make search requests through HttpGet operations and get returned results in XML format. 0x02 Vulnerability Introduction The VelocityResponseWriter component exists in Solr. An attacker can construct a specific request to modify the relevant configuration, so that the VelocityResponseWriter component allows loading of the specified template, which in turn leads to the Velocity template injection remote command execution vulnerability. The attacker exploits this
What aspects does velocity syntax include?Velocity syntax includes: 1. Script instructions, Velocity uses the "#" symbol to identify script instructions; 2. Variable references, Velocity uses the "" symbol to identify variable references; 3. Loop structures, Velocity supports loop structures; 4. Function calls, Velocity supports calling Java methods or custom methods; 5. Import and export, Velocity supports import and export templates.
Related Resource DownloadsMore>
- 02-27
- 02-26
- 04-17
- 02-27
Related TutorialsMore>
- 01-13
- 03-04
- 03-04
- 03-04
- 03-04
- 03-04