CVE-2020-5245

Опубликовано: 24 фев. 2020

Источник: nvd

CVSS3: 7.9

CVSS3: 8.8

CVSS2: 9

EPSS Низкий

Описание

Dropwizard-Validation before 1.3.19, and 2.0.2 may allow arbitrary code execution on the host system, with the privileges of the Dropwizard service account, by injecting arbitrary Java Expression Language expressions when using the self-validating feature.

The issue has been fixed in dropwizard-validation 1.3.19 and 2.0.2.

Ссылки

https://beanvalidation.org/2.0/spec/#validationapi-message-defaultmessageinterpolation
Third Party Advisory
https://docs.jboss.org/hibernate/validator/6.1/reference/en-US/html_single/#section-interpolation-with-message-expressions
Third Party Advisory
https://docs.oracle.com/javaee/7/tutorial/jsf-el.htm
Third Party Advisory
https://github.com/dropwizard/dropwizard/commit/28479f743a9d0aab6d0e963fc07f3dd98e8c8236
https://github.com/dropwizard/dropwizard/commit/d87d1e4f8e20f6494c0232bf8560c961b46db634
Patch
Third Party Advisory
https://github.com/dropwizard/dropwizard/pull/3157
Patch
Third Party Advisory
https://github.com/dropwizard/dropwizard/pull/3160
Patch
Third Party Advisory
https://github.com/dropwizard/dropwizard/security/advisories/GHSA-3mcp-9wr4-cjqf
Exploit
Third Party Advisory
https://beanvalidation.org/2.0/spec/#validationapi-message-defaultmessageinterpolation
Third Party Advisory
https://docs.jboss.org/hibernate/validator/6.1/reference/en-US/html_single/#section-interpolation-with-message-expressions
Third Party Advisory
https://docs.oracle.com/javaee/7/tutorial/jsf-el.htm
Third Party Advisory
https://github.com/dropwizard/dropwizard/commit/28479f743a9d0aab6d0e963fc07f3dd98e8c8236
https://github.com/dropwizard/dropwizard/commit/d87d1e4f8e20f6494c0232bf8560c961b46db634
Patch
Third Party Advisory
https://github.com/dropwizard/dropwizard/pull/3157
Patch
Third Party Advisory
https://github.com/dropwizard/dropwizard/pull/3160
Patch
Third Party Advisory
https://github.com/dropwizard/dropwizard/security/advisories/GHSA-3mcp-9wr4-cjqf
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:dropwizard:dropwizard_validation:*:*:*:*:*:*:*:*

Версия до 1.3.19 (исключая)

cpe:2.3:a:dropwizard:dropwizard_validation:*:*:*:*:*:*:*:*

Версия от 2.0.0 (включая) до 2.0.2 (исключая)

Конфигурация 2

cpe:2.3:a:oracle:blockchain_platform:*:*:*:*:*:*:*:*

Версия до 21.1.2 (исключая)

EPSS

Процентиль: 91%

0.06297

Низкий

7.9 High

CVSS3

8.8 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-74

Связанные уязвимости

GHSA-3mcp-9wr4-cjqf

CVSS3: 7.9

github

почти 6 лет назад

Remote Code Execution (RCE) vulnerability in dropwizard-validation

BDU:2022-02826

CVSS3: 8.8

fstec

почти 6 лет назад

Уязвимость программного средства Dropwizard-Validation, существующая из-за непринятия мер по нейтрализации специальных элементов, позволяющая нарушителю выполнить произвольный код с привилегиями учетной записи службы Dropwizard

EPSS

Процентиль: 91%

0.06297

Низкий

7.9 High

CVSS3

8.8 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-74