PT-2023-12830 · Bstek · Uflo-Core

Fmyyy · Published 2023-01-25 · Updated 2023-08-08 · CVE-2022-25894

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions com.bstek.uflo:uflo-core (affected versions not specified)

Description The issue concerns improper user input validation in the ExpressionContextImpl class, specifically via the jexl.createExpression(expression).evaluate(context) functionality, leading to Remote Code Execution (RCE).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2022-25894

GHSA-8M9F-C5P9-WQCH

Affected Products

Uflo-Core

References · 7

• 🔥 https://fmyyy1.github.io/2022/10/23/uflo2rce · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-25894 · Security Note
• https://osv.dev/vulnerability/CVE-2022-25894 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-8m9f-c5p9-wqch · Vendor Advisory
• https://github.com/youseries/uflo/blob/b3e198bc6523e5a6ba69edd84ba10e05a3b78726/uflo-core/src/main/java/com/bstek/uflo/expr/impl/ExpressionContextImpl.java%23L126 · Note
• https://github.com/youseries/uflo/blob/b3e198bc6523e5a6ba69edd84ba10e05a3b78726/uflo-core/src/main/java/com/bstek/uflo/expr/impl/ExpressionContextImpl.java#L126 · Note
• https://security.snyk.io/vuln/SNYK-JAVA-COMBSTEKUFLO-3091112 · Note