Lucene search
GoogleOSV:CVE-2021-23258HistoryDec 02, 2021 - 4:15 p.m.
CVE-2021-23258
2021-12-0216:15:07
Google
osv.dev
3
cve-2021-23258
spring beans
administrator
developer
os commands
security restrictions
arbitrary commands
rce
software
Authenticated users with Administrator or Developer roles may execute OS commands by SPEL Expression in Spring beans. SPEL Expression does not have security restrictions, which will cause attackers to execute arbitrary commands remotely (RCE).
Related
prion
prion
Command injection
2021-12-02 16:15:00
cve
cve
CVE-2021-23258
2021-12-02 16:15:07
cnvd
cnvd
Crafter CMS Expression Injection Vulnerability
2021-12-04 00:00:00
cvelist
cvelist
CVE-2021-23258 Spring SPEL Expression Language Injection
2021-12-02 15:40:54
nvd
nvd
CVE-2021-23258
2021-12-02 16:15:07