Code injection

2022-09-0618:15:00

PRIOn knowledge base

www.prio-n.com

9.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.3%

An issue was discovered in OpenRemote through 1.0.4 allows attackers to execute arbitrary code via a crafted Groovy rule.

CPENameOperatorVersion
openremotele1.0.4

CPE	Name	Operator	Version
	openremote	le	1.0.4

References

github.com/openremote/openremote/

securityblog101.blogspot.com/2022/09/cve-2022-31860.html

stackoverflow.com/questions/159148/groovy-executing-shell-commands

stackoverflow.com/questions/66069960/groovy-shell-sandboxing-best-practices