Expression injection in AviatorScript

2021-10-0420:14:31

Google

osv.dev

0.004 Low

EPSS

Percentile

72.1%

JSON

AviatorScript through 5.2.7 allows code execution via an expression that is encoded with Byte Code Engineering Library (BCEL).

CPENameOperatorVersion
com.googlecode.aviator:aviatoreq5.2.5
com.googlecode.aviator:aviatoreq5.2.7
com.googlecode.aviator:aviatoreq5.2.2
com.googlecode.aviator:aviatoreq5.2.4
com.googlecode.aviator:aviatoreq5.2.3
com.googlecode.aviator:aviatoreq5.2.1
com.googlecode.aviator:aviatoreq5.2.6

Name	Operator	Version
com.googlecode.aviator:aviator	eq	5.2.5
com.googlecode.aviator:aviator	eq	5.2.7
com.googlecode.aviator:aviator	eq	5.2.2
com.googlecode.aviator:aviator	eq	5.2.4
com.googlecode.aviator:aviator	eq	5.2.3
com.googlecode.aviator:aviator	eq	5.2.1
com.googlecode.aviator:aviator	eq	5.2.6