Lucene search
GoogleOSV:GHSA-C3MP-9VX3-2RVVHistoryMay 24, 2022 - 5:42 p.m.
OpenNMS Horizon RCE via JEXL2 expression
2022-05-2417:42:35
Google
osv.dev
5
0.002 Low
EPSS
Percentile
61.5%
OpenNMS Meridian 2016, 2017, 2018 before 2018.1.25, 2019 before 2019.1.16, and 2020 before 2020.1.5, Horizon 1.2 through 27.0.4, and Newts <1.5.3 has Incorrect Access Control, which allows local and remote code execution using JEXL expressions.
Related
cve
cve
CVE-2021-3396
2021-02-17 21:15:13
cvelist
cvelist
CVE-2021-3396
2021-02-17 20:13:54
nvd
nvd
CVE-2021-3396
2021-02-17 21:15:13
prion
prion
Remote code execution
2021-02-17 21:15:00
osv
osv
CVE-2021-3396
2021-02-17 21:15:13
github
github
OpenNMS Horizon RCE via JEXL2 expression
2022-05-24 17:42:35