CWE-917 Archives - CVE Vulnerability

CVE-2018-16621

Sun, 26 Feb 2023 06:47:07 +0000

Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection.

The post CVE-2018-16621 appeared first on CVE Vulnerability.

CVE-2018-12532

Sun, 26 Feb 2023 06:45:41 +0000

JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language (EL) variable mapper and execute arbitrary Java code via a MediaOutputResource’s resource request, aka RF-14309.

The post CVE-2018-12532 appeared first on CVE Vulnerability.

CVE-2018-12533

Sun, 26 Feb 2023 06:45:41 +0000

JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via a /DATA/ substring in a path with an org.richfaces.renderkit.html.Paint2DResource$ImageData object, aka RF-14310.

The post CVE-2018-12533 appeared first on CVE Vulnerability.

CVE-2020-9296

Sun, 26 Feb 2023 06:43:42 +0000

Netflix Titus uses Java Bean Validation (JSR 380) custom constraint validators. When building custom constraint violation error messages, different types of interpolation are supported, including Java EL expressions. If an attacker can inject arbitrary data in the error message template being passed to ConstraintValidatorContext.buildConstraintViolationWithTemplate() argument, they will be able to run arbitrary Java code.

The post CVE-2020-9296 appeared first on CVE Vulnerability.

CVE-2020-9297

Sun, 26 Feb 2023 06:43:42 +0000

Netflix Titus, all versions prior to version v0.1.1-rc.274, uses Java Bean Validation (JSR 380) custom constraint validators. When building custom constraint violation error messages, different types of interpolation are supported, including Java EL expressions. If an attacker can inject arbitrary data in the error message template being passed to ConstraintValidatorContext.buildConstraintViolationWithTemplate() argument, they will be able to run arbitrary Java code.

The post CVE-2020-9297 appeared first on CVE Vulnerability.

CVE-2020-7799

Sun, 26 Feb 2023 06:43:10 +0000

An issue was discovered in FusionAuth before 1.11.0. An authenticated user, allowed to edit e-mail templates (Home -> Settings -> Email Templates) or themes (Home -> Settings -> Themes), can execute commands on the underlying operating system by abusing freemarker.template.utility.Execute in the Apache FreeMarker engine that processes custom templates.

The post CVE-2020-7799 appeared first on CVE Vulnerability.

CVE-2020-7177

Sun, 26 Feb 2023 06:42:59 +0000

A wmiconfigcontent expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).

The post CVE-2020-7177 appeared first on CVE Vulnerability.

CVE-2020-7178

Sun, 26 Feb 2023 06:42:59 +0000

A mediaforaction expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).

The post CVE-2020-7178 appeared first on CVE Vulnerability.

CVE-2020-7179

Sun, 26 Feb 2023 06:42:59 +0000

A thirdpartyperfselecttask expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).

The post CVE-2020-7179 appeared first on CVE Vulnerability.

CVE-2020-7180

Sun, 26 Feb 2023 06:42:59 +0000

A ictexpertdownload expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).

The post CVE-2020-7180 appeared first on CVE Vulnerability.