PT-2020-6653 · Unknown · Dropwizard-Validation

Pwntester · Published 2020-02-24 · Updated 2025-06-03 · CVE-2020-5245

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dropwizard-Validation versions prior to 1.3.19 Dropwizard-Validation versions prior to 2.0.2

Description The issue allows arbitrary code execution on the host system with the privileges of the Dropwizard service account by injecting arbitrary Java Expression Language expressions when using the self-validating feature. This is a server-side template injection vulnerability in the self-validating feature of dropwizard-validation, enabling attackers to inject arbitrary Java EL expressions, leading to Remote Code Execution (RCE).

Recommendations For Dropwizard-Validation versions prior to 1.3.19, upgrade to Dropwizard 1.3.19. For Dropwizard-Validation versions prior to 2.0.2, upgrade to Dropwizard 2.0.2. As a temporary workaround, consider properly sanitizing any message added to the ViolationCollector in the method annotated with @SelfValidation to prevent exploitation.

Exploit

Fix

Special Elements Injection

Code Injection

Weakness Enumeration

CWE-74

CWE-94

Related Identifiers

BDU:2022-02826

CVE-2020-5245

GHSA-3MCP-9WR4-CJQF

GHSA-7V6M-28JR-RG84

RHSA-2025:10924

RHSA-2025:10925

RHSA-2025:10926

Affected Products

Dropwizard-Validation

References · 35

• 🔥 https://github.com/dropwizard/dropwizard/security/advisories/GHSA-3mcp-9wr4-cjqf · Exploit
• https://github.com/dropwizard/dropwizard/commit/d87d1e4f8e20f6494c0232bf8560c961b46db634 · Patch
• https://github.com/dropwizard/dropwizard/pull/3157 · Patch
• https://github.com/dropwizard/dropwizard/pull/3160 · Patch
• https://bdu.fstec.ru/vul/2022-02826 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-5245 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-4428 · Security Note
• https://cve.org/CVERecord?id=CVE-2020-5245 · Security Note
• https://osv.dev/vulnerability/CVE-2020-5245 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-7v6m-28jr-rg84 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-3mcp-9wr4-cjqf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-35036 · Security Note
• https://github.com/dropwizard/dropwizard/commit/28479f743a9d0aab6d0e963fc07f3dd98e8c8236 · Note
• https://github.com/dropwizard/dropwizard · Note
• https://github.com/hibernate/hibernate-validator/compare/6.1.7.Final...6.2.0.Final · Note