GitHub Advisoryadvisory · Maven

GHSA-822v-8w6h-5jxp Warm-Flow has a SpEL Expression Injection in SpelHelper.parseExpression

LOW Published 2026-04-12 Modified 2026-04-14 Official page ↗
Aliases
CVE-2026-6125
Ecosystem
Maven
Packages
org.dromara.warm:warm-flow-plugin-modes-sb
Severity
Low
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-74
Reviewed
2026-04-14

Affected packages

• Maven org.dromara.warm:warm-flow-plugin-modes-sb: < 1.8.5 → fixed in 1.8.5

Description

A security flaw has been discovered in Dromara warm-flow up to 1.8.4. Impacted is the function SpelHelper.parseExpression of the file /warm-flow/save-json of the component Workflow Definition Handler. The manipulation of the argument listenerPath/skipCondition/permissionFlag results in code injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.

Related

Alias · CVE (1)

  • CVE-2026-6125 A security flaw has been discovered in Dromara warm-flow up to 1.8.4. vulnerability

Weakness · CWE (1)

  • CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness

References