Количество 2
Количество 2
CVE-2022-25894
около 3 лет назад
All versions of the package com.bstek.uflo:uflo-core are vulnerable to Remote Code Execution (RCE) in the ExpressionContextImpl class via jexl.createExpression(expression).evaluate(context); functionality, due to improper user input validation.
CVSS3: 9.8
EPSS: Низкий
GHSA-8m9f-c5p9-wqch
около 3 лет назад
Remote Code Execution in com.bstek.uflo:uflo-core
CVSS3: 9.8
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-25894 All versions of the package com.bstek.uflo:uflo-core are vulnerable to Remote Code Execution (RCE) in the ExpressionContextImpl class via jexl.createExpression(expression).evaluate(context); functionality, due to improper user input validation. | CVSS3: 9.8 | 4% Низкий | около 3 лет назад |
| GHSA-8m9f-c5p9-wqch Remote Code Execution in com.bstek.uflo:uflo-core | CVSS3: 9.8 | 4% Низкий | около 3 лет назад |
Уязвимостей на страницу
20