Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-51079
HistoryDec 27, 2023 - 9:15 p.m.

Authorization

2023-12-2721:15:00
PRIOn knowledge base
www.prio-n.com
4
authorization
security
mvel
parsetools
method
execution time
java class lookups

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.0%

A long execution time can occur in the ParseTools.subCompileExpression method in MVEL 2.5.0.Final because of many Java class lookups. NOTE: the vendor disputes this because “the only thing that you could expect is that the parser will take a crazy amount of time to complete its task.”

CPENameOperatorVersion
mveleq2.5.0

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.0%