PT-2023-12830 · Bstek · Uflo-Core

Fmyyy · Publicado 2023-01-25 · Atualizado 2023-08-08 · CVE-2022-25894

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions com.bstek.uflo:uflo-core (affected versions not specified)

Description The issue concerns improper user input validation in the ExpressionContextImpl class, specifically via the jexl.createExpression(expression).evaluate(context) functionality, leading to Remote Code Execution (RCE).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2022-25894

GHSA-8M9F-C5P9-WQCH

Produtos afetados

Uflo-Core

Referências · 7

• 🔥 https://fmyyy1.github.io/2022/10/23/uflo2rce · Exploit
• https://github.com/youseries/uflo/blob/b3e198bc6523e5a6ba69edd84ba10e05a3b78726/uflo-core/src/main/java/com/bstek/uflo/expr/impl/ExpressionContextImpl.java%23L126 · Nota
• https://github.com/youseries/uflo/blob/b3e198bc6523e5a6ba69edd84ba10e05a3b78726/uflo-core/src/main/java/com/bstek/uflo/expr/impl/ExpressionContextImpl.java#L126 · Nota
• https://security.snyk.io/vuln/SNYK-JAVA-COMBSTEKUFLO-3091112 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2022-25894 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2022-25894 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-8m9f-c5p9-wqch · Aviso do Fabricante