EUVD-2023-0410

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Remote Code Execution vulnerability in uflo-core affects security protocols significantly.

Reporter	Title	Published	Views	Family All 14
CNNVD	UFLO 代码注入漏洞	26 Jan 202300:00	–	cnnvd
CVE	CVE-2022-25894	25 Jan 202305:00	–	cve
Cvelist	CVE-2022-25894	25 Jan 202305:00	–	cvelist
Github Security Blog	Remote Code Execution in com.bstek.uflo:uflo-core	26 Jan 202321:30	–	github
NVD	CVE-2022-25894	26 Jan 202321:15	–	nvd
OSV	GHSA-8M9F-C5P9-WQCH Remote Code Execution in com.bstek.uflo:uflo-core	26 Jan 202321:30	–	osv
Prion	Input validation	26 Jan 202321:15	–	prion
Positive Technologies	PT-2023-12830 · Bstek · Uflo-Core	25 Jan 202300:00	–	ptsecurity
RedhatCVE	CVE-2022-25894	6 Feb 202501:59	–	redhatcve
Snyk	Remote Code Execution (RCE)	31 Oct 202206:43	–	snyk

[
  {
    "enisaIdVendor": [
      {
        "id": "b4d2b57f-b7fa-3a6c-ae59-283d5a0b7a99",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "2221fcd0-5884-3a5f-b144-de90a84a3b59",
        "product": {
          "name": "com.bstek.uflo:uflo-core"
        },
        "product_version": "0 <*"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-25894
fmyyy1	www.fmyyy1.github.io/2022/10/23/uflo2rce
github	www.github.com/youseries/uflo/blob/b3e198bc6523e5a6ba69edd84ba10e05a3b78726/uflo-core/src/main/java/com/bstek/uflo/expr/impl/ExpressionContextImpl.java
github	www.github.com/youseries/uflo/blob/b3e198bc6523e5a6ba69edd84ba10e05a3b78726/uflo-core/src/main/java/com/bstek/uflo/expr/impl/ExpressionContextImpl.java%23L126
security	www.security.snyk.io/vuln/SNYK-JAVA-COMBSTEKUFLO-3091112
fmyyy1	www.fmyyy1.github.io/2022/10/23/uflo2rce/

03 Oct 2025 20:07Current

9.2High risk

Vulners AI Score9.2

CVSS 3.19.8

EPSS0.03741

SSVC