CVE-2025-53192 Apache Commons OGNL: Expression Injection leading to RCE

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Expression/Command Delimiters vulnerability in Apache Commons OGNL. This issue affects Apache Commons OGNL: all versions. When using the API Ognl.getValue​, the OGNL engine parses and evaluates the provided expression with powerful capabilities...

CVE-2025-53192

Apache Commons OGNL (OGNL library) contains an improper neutralization of expression/command delimiters when using Ognl.getValue, allowing bypass of blocklisted dangerous classes and potentially enabling arbitrary code execution. Affected: OGNL engine across versions; impact noted as high (CVE-20...