CVE-2022-25894 - OpenCVE

All versions of the package com.bstek.uflo:uflo-core are vulnerable to Remote Code Execution (RCE) in the ExpressionContextImpl class via jexl.createExpression(expression).evaluate(context); functionality, due to improper user input validation.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Uflo Project	Uflo

Configuration 1 [-]

cpe:2.3:a:uflo_project:uflo:*:*:*:*:*:*:*:*

References

Link	Resource
https://fmyyy1.github.io/2022/10/23/uflo2rce/	Exploit Third Party Advisory
https://github.com/youseries/uflo/blob/b3e198bc6523e5a6ba69edd84ba10e05a3b78726/uflo-core/src/main/java/com/bstek/uflo/expr/impl/ExpressionContextImpl.java%23L126	Broken Link
https://security.snyk.io/vuln/SNYK-JAVA-COMBSTEKUFLO-3091112	Third Party Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: snyk

Published: 2023-01-25T05:00:03.528Z

Updated:

Reserved: 2022-02-24T11:58:25.162Z

Link: CVE-2022-25894

JSON object: View

NVD Information

Status : Modified

Published: 2023-01-26T21:15:31.607

Modified: 2023-11-07T03:44:52.407

Link: CVE-2022-25894

JSON object: View

Redhat Information

No data.

CWE

CWE-94

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:uflo_project:uflo:*:*:*:*:*:*:*:*", "matchCriteriaId": "DF6026FA-12EF-47AD-8D98-E7D3524772EA", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "All versions of the package com.bstek.uflo:uflo-core are vulnerable to Remote Code Execution (RCE) in the ExpressionContextImpl class via jexl.createExpression(expression).evaluate(context); functionality, due to improper user input validation."}, {"lang": "es", "value": "Todas las versiones del paquete com.bstek.uflo:uflo-core son vulnerables a la ejecuci\u00f3n remota de c\u00f3digo (RCE) en la clase ExpressionContextImpl a trav\u00e9s de jexl.createExpression(expression).evaluate(context); functionality, debido a una validaci\u00f3n inadecuada de la entrada del usuario."}], "id": "CVE-2022-25894", "lastModified": "2023-11-07T03:44:52.407", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "report@snyk.io", "type": "Secondary"}]}, "published": "2023-01-26T21:15:31.607", "references": [{"source": "report@snyk.io", "tags": ["Exploit", "Third Party Advisory"], "url": "https://fmyyy1.github.io/2022/10/23/uflo2rce/"}, {"source": "report@snyk.io", "tags": ["Broken Link"], "url": "https://github.com/youseries/uflo/blob/b3e198bc6523e5a6ba69edd84ba10e05a3b78726/uflo-core/src/main/java/com/bstek/uflo/expr/impl/ExpressionContextImpl.java%23L126"}, {"source": "report@snyk.io", "tags": ["Third Party Advisory"], "url": "https://security.snyk.io/vuln/SNYK-JAVA-COMBSTEKUFLO-3091112"}], "sourceIdentifier": "report@snyk.io", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-94"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-94"}], "source": "report@snyk.io", "type": "Secondary"}]}