Lucene search

K
cvelistMitreCVELIST:CVE-2023-51079
HistoryDec 27, 2023 - 12:00 a.m.

CVE-2023-51079

2023-12-2700:00:00
mitre
www.cve.org
1
cve-2023-51079
mvel
parsetools
subcompileexpression
long execution time
java class lookups
vendor disputes

0.001 Low

EPSS

Percentile

20.0%

A long execution time can occur in the ParseTools.subCompileExpression method in MVEL 2.5.0.Final because of many Java class lookups. NOTE: the vendor disputes this because “the only thing that you could expect is that the parser will take a crazy amount of time to complete its task.”

0.001 Low

EPSS

Percentile

20.0%