CVE-2023-51387 Expression Injection Vulnerability in Hertzbeat

Hertzbeat is an open source, real-time monitoring system. Hertzbeat uses aviatorscript to evaluate alert expressions. The alert expressions are supposed to be some simple expressions. However, due to improper sanitization for alert expressions in version prior to 1.4.1, a malicious user can use a...

CVE-2023-51387: Improper Control of Generation of Code

Hertzbeat is an open source, real-time monitoring system. Hertzbeat uses aviatorscript to evaluate alert expressions. The alert expressions are supposed to be some simple expressions. However, due to improper sanitization for alert expressions in version prior to 1.4.1, a malicious user can use a...

Expression injection in AviatorScript

AviatorScript through 5.2.7 allows code execution via an expression that is encoded with Byte Code Engineering Library BCEL...

GHSA-XPV2-8PPJ-79HH Expression injection in AviatorScript

AviatorScript through 5.2.7 allows code execution via an expression that is encoded with Byte Code Engineering Library BCEL...

CVE-2021-41862

AviatorScript through 5.2.7 allows code execution via an expression that is encoded with Byte Code Engineering Library BCEL...

CVE-2021-41862

AviatorScript through 5.2.7 allows code execution via an expression that is encoded with Byte Code Engineering Library BCEL...

Code injection

AviatorScript through 5.2.7 allows code execution via an expression that is encoded with Byte Code Engineering Library BCEL...

AviatorScript 注入漏洞

AviatorScript is a high-performance, lightweight scripting language hosted on top of Jvm. An injection vulnerability exists in AviatorScript 5.2.7 that allows code execution via expressions encoded using the Byte Code Engineering Library BCEL...

CVE-2021-41862

AviatorScript through 5.2.7 allows code execution via an expression that is encoded with Byte Code Engineering Library BCEL...

CVE-2021-41862

CVE-2021-41862 affects AviatorScript up to version 5.2.7. An expression parsed via the ByteCode Engineering Library (BCEL) can lead to arbitrary code execution. The entry describes an expression injection vulnerability where BCEL-encoded expressions are evaluated, enabling attacker-controlled cod...

CVE-2021-41862: Improper Neutralization of Special Elements in Output Used by a Downstream Component

AviatorScript through 5.2.7 allows code execution via an expression that is encoded with Byte Code Engineering Library BCEL...