This commit is contained in:
advisory-database[bot] 2023-12-29 19:43:14 +00:00
Родитель 4e75eea8f4
Коммит 461df2ae83
1 изменённых файлов: 19 добавлений и 6 удалений

Просмотреть файл

@ -1,17 +1,26 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fgwc-3j6w-ch22",
"modified": "2023-12-29T15:30:37Z",
"modified": "2023-12-29T19:42:00Z",
"published": "2023-12-29T15:30:37Z",
"aliases": [
"CVE-2023-50571"
],
"details": "easy-rules-mvel v4.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component MVELRule.",
"summary": "easy-rules-mvel vulnerable to remote code execution",
"details": "easy-rules-mvel v4.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component `mVELRule`.",
"severity": [
],
"affected": [
{
"package": {
"ecosystem": "Maven",
"name": "org.jeasy:easy-rules-mvel"
},
"versions": [
"4.1.0"
]
}
],
"references": [
{
@ -21,15 +30,19 @@
{
"type": "WEB",
"url": "https://github.com/j-easy/easy-rules/issues/419"
},
{
"type": "PACKAGE",
"url": "https://github.com/j-easy/easy-rules"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"severity": "CRITICAL",
"github_reviewed": true,
"github_reviewed_at": "2023-12-29T19:42:00Z",
"nvd_published_at": "2023-12-29T15:15:09Z"
}
}