Shifu Code Injection Vulnerability

Shifu is Shifu open source an open source end-to-end machine learning and data mining framework built on top of Hadoop. A code injection vulnerability exists in Shifu version 0.12.0, which stems from the parameter FilterExpression in the file src/main/java/ml/shifu/shifu/core/DataPurifier.java ca...