PT-2020-6435 · Unknown+1 · Jakarta Expression Language+1

Published 2020-04-14 · Updated 2022-04-25 · CVE-2021-28170

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Jakarta Expression Language implementation version 3.0.3 and earlier

Description The issue is related to a bug in the ELParserTokenManager function of the Jakarta Expression Language implementation, which allows invalid EL expressions to be evaluated as if they were valid. This can potentially enable a remote attacker to impact data integrity by exploiting the vulnerability.

Recommendations For Jakarta Expression Language implementation version 3.0.3 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

CWE-917

Related Identifiers

BDU:2021-04679

CVE-2021-28170

GHSA-V6W3-2PRQ-H95F

RHSA-2021:3466

RHSA-2021:3467

RHSA-2021:3468

RHSA-2021:3656

RHSA-2021:3658

RHSA-2025:9582

Affected Products

Debian

Jakarta Expression Language

References · 16

• 🔥 https://github.com/eclipse-ee4j/el-ri/issues/155 · Exploit
• 🔥 https://securitylab.github.com/advisories/GHSL-2020-021-jakarta-el · Exploit
• https://cve.org/CVERecord?id=CVE-2021-28170 · Security Note
• https://osv.dev/vulnerability/CVE-2021-28170 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-28170 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-28170 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-28170 · Security Note
• https://oracle.com/security-alerts/cpuapr2022.html · Patch
• https://bdu.fstec.ru/vul/2021-04679 · Security Note
• https://osv.dev/vulnerability/GHSA-v6w3-2prq-h95f · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-28170 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-28170 · Vendor Advisory
• https://github.com/eclipse-ee4j/el-ri/pull/160/commits/b6a3943ac5fba71cbc6719f092e319caa747855b · Note
• https://github.com/eclipse-ee4j/el-ri · Note
• https://security.snyk.io/vuln/SNYK-JAVA-ORGGLASSFISH-2841368 · Note