CVE-2022-25894

9.8CRITICAL

All versions of the package com.bstek.uflo:uflo-core are vulnerable to Remote Code Execution (RCE) in the ExpressionContextImpl class via jexl.createExpression(expression).evaluate(context); functiona

发布于: 1/26/2023更新于: 4/1/2025
在NVD查看在MITRE查看

描述

All versions of the package com.bstek.uflo:uflo-core are vulnerable to Remote Code Execution (RCE) in the ExpressionContextImpl class via jexl.createExpression(expression).evaluate(context); functionality, due to improper user input validation.

AI分析AI驱动

受影响产品

uflo_projectuflo

参考资料