Input validation

2019-02-1318:29:00

PRIOn knowledge base

www.prio-n.com

9.3 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

85.7%

JSON

Input validation issue in POWER EGG(Ver 2.0.1, Ver 2.02 Patch 3 and earlier, Ver 2.1 Patch 4 and earlier, Ver 2.2 Patch 7 and earlier, Ver 2.3 Patch 9 and earlier, Ver 2.4 Patch 13 and earlier, Ver 2.5 Patch 12 and earlier, Ver 2.6 Patch 8 and earlier, Ver 2.7 Patch 6 and earlier, Ver 2.7 Government Edition Patch 7 and earlier, Ver 2.8 Patch 6 and earlier, Ver 2.8c Patch 5 and earlier, Ver 2.9 Patch 4 and earlier) allows remote attackers to execute EL expression on the server via unspecified vectors.

CPENameOperatorVersion
power_eggeq2.0.1
power_eggeq2.1 patch4
power_eggeq2.0.2 patch3
power_eggeq2.2 patch7
power_eggeq2.3 patch9
power_eggeq2.4 patch13
power_eggeq2.5 patch12
power_eggeq2.6 patch8
power_eggeq2.7 patch6
power_eggeq2.8 patch6

Name	Operator	Version
power_egg	eq	2.0.1
power_egg	eq	2.1 patch4
power_egg	eq	2.0.2 patch3
power_egg	eq	2.2 patch7
power_egg	eq	2.3 patch9
power_egg	eq	2.4 patch13
power_egg	eq	2.5 patch12
power_egg	eq	2.6 patch8
power_egg	eq	2.7 patch6
power_egg	eq	2.8 patch6