Security Advisory

CVE-2022-25894

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-01-25 05:00:03

Last updated 2025-04-01 14:53:31

Assigner snyk

State PUBLISHED

Description

All versions of the package com.bstek.uflo:uflo-core are vulnerable to Remote Code Execution (RCE) in the ExpressionContextImpl class via jexl.createExpression(expression).evaluate(context); functionality, due to improper user input validation.

← Browse all CVEs View on cve.org ↗