[JEXL-223] Apache Commons JEXL Expression Execute Command Vulnerabilitity

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 3.1
• Fix Version/s: 3.3
• Assignee: Henri Biestro
• Reporter: cnbird
• Created: 21/Apr/17 07:35
• Updated: 27/Mar/23 10:59
• Resolved: 14/Feb/23 18:10

Description

0x01 Summary
Apache Commons JEXL Expression Execute Command Vulnerabilitity throught groovy.

0x02 POC
POC Report to Apache Security Email Address [e-mail].

Issue Links

• is fixed by: JEXL-357 Configure accessible packages/classes/methods/fields
• is fixed by: JEXL-381 Change default JEXL configuration to a more security-friendly behaviour