GitHub Advisoryadvisory · Maven

GHSA-fgwc-3j6w-ch22 easy-rules-mvel vulnerable to remote code execution

HIGH Published 2023-12-29 Modified 2024-01-05 Official page ↗
Aliases
CVE-2023-50571
Ecosystem
Maven
Packages
org.jeasy:easy-rules-mvel
Severity
High
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Reviewed
2023-12-29

Affected packages

• Maven org.jeasy:easy-rules-mvel: 4.1.0 (no fix yet)

Description

easy-rules-mvel v4.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component `mVELRule`.

Related

Alias · CVE (1)

  • CVE-2023-50571 easy-rules-mvel v4.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component MVELRule. vulnerability

References