Beveiligingsadvies

CVE-2021-23258

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-12-02 15:40:54

Laatst bijgewerkt 2024-09-16 22:02:38

Toegewezen door crafter

CVSS-score 4.2

Status PUBLISHED

Beschrijving

Authenticated users with Administrator or Developer roles may execute OS commands by SPEL Expression in Spring beans. SPEL Expression does not have security restrictions, which will cause attackers to execute arbitrary commands remotely (RCE).

← Alle CVE's bekijken Bekijk op cve.org ↗