PT-2022-16005 · Nepxion · Nepxion Discovery

Jorge Rosillo + 1 · Published 2022-09-24 · Updated 2022-09-28 · CVE-2022-23463

Positive Technologies (AI Summary)

CVSS v3.1

9.4

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions Nepxion Discovery (affected versions not specified)

Description The issue is related to SpEL Injection in discovery-commons, where the DiscoveryExpressionResolver’s eval method evaluates expressions with a StandardEvaluationContext. This allows the expression to interact with Java classes, such as java.lang.Runtime, leading to Remote Code Execution. There are no known workarounds for this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-917

Related Identifiers

CVE-2022-23463

GHSA-Q979-9M39-23MQ

Affected Products

Nepxion Discovery

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23463.json · Exploit
• 🔥 https://securitylab.github.com/advisories/GHSL-2022-033_GHSL-2022-034_Discovery · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-23463 · Security Note
• https://osv.dev/vulnerability/CVE-2022-23463 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-q979-9m39-23mq · Vendor Advisory
• https://github.com/Nepxion/Discovery · Note
• https://t.me/cvenotify/36793 · Telegram Post
• https://t.me/cvenotify/36782 · Telegram Post