12 matches found
Apache Unomi <1.5.2 - Remote Code Execution
Apache Unomi allows conditions to use OGNL and MVEL scripting which offers the possibility to call static Java classes from the JDK that could execute code with the permission level of the running Java process. This vulnerability affects all versions of Apache Unomi prior to 1.5.2. id:...
Exploit for Improper Input Validation in Apache Unomi
CVE-2020-13942 Run httpx or httprob on the...
Exploit for Improper Input Validation in Apache Unomi
CVE-2020-13942 Original blog post about the vulnerability: ht...
Apache Unomi Remote Code Execution(CVE-2020-13942)
A remote code execution vulnerability exists in the Apache Unomi project. The vulnerability is due to insufficient validation of OGNL and MVEL2. Successful exploitation of this vulnerability could result in execution of arbitrary code...
CVE-2020-13942
CVE-2020-13942 affects Apache Unomi before 1.5.2, where OGNL/MVEL-based input could lead to remote code execution via the /context.json endpoint. The root cause is unsafely evaluating scripting expressions in conditions, allowing an attacker to invoke Java classes and functions; multiple public P...
CVE-2020-13942 Remote Code Execution in Apache Unomi
It is possible to inject malicious OGNL or MVEL scripts into the /context.json public endpoint. This was partially fixed in 1.5.1 but a new attack vector was found. In Apache Unomi version 1.5.2 scripts are now completely filtered from the input. It is highly recommended to upgrade to the latest...
Exploit for CVE-2020-11975
Statement The vulnerability detection methods, documents, a...
CVE-2020-13942
creationtimestamp| type| source ---|---|--- 2020-11-23 03:53:17+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2119 2020-11-23 09:45:55+00:00| published-proof-of-concept| https://t.me/cKure/2943 2020-11-24 20:46:57+00:00| seen| https://t.me/cibsecurity/16796 2023-11-22...
Exploit for Improper Input Validation in Apache Unomi
CVE-2020-13942 Run httpx or httprob on the...
Exploit for Improper Input Validation in Apache Unomi
CVE-2020-13942 POC + Automation Script Steps S...
Exploit for Improper Input Validation in Apache Unomi
CVE-2020-13942 CVE-2020-13942 POC by Eugene Rojavski Origi...
WAF JSON decoding capability required to protect against API threats like CVE-2020-13942 Apache Unomi RCE
New critical Apache Unomi exploit was released yesterday. As an official press release says: "Apache Unomi is the industrys first reference implementation of the upcoming OASIS CDP specification established by the OASIS CXS Technical Committee, which sets standards as a core technology for enabli...