Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-88815
HistorySep 28, 2022 - 12:00 a.m.

Nepxion Discovery Remote Code Execution Vulnerability

2022-09-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
22
nepxion discovery
remote code execution
middleware
service discovery
spring cloud
vulnerability
input validation
spel injection
attack
exploitation
cnvd

0.004 Low

EPSS

Percentile

73.7%

Nepxion Discovery is an enhanced middleware for service registration discovery for Spring Cloud. Nepxion Discovery 6.16.2 and earlier versions are vulnerable to a remote code execution vulnerability that stems from a lack of validation of input data in Discovery-commons and is susceptible to SpEL injection attacks The vulnerability can be exploited by an attacker to cause remote code execution.

CPENameOperatorVersion
nepxion discoveryle6.16.2

0.004 Low

EPSS

Percentile

73.7%