13 matches found
CVE-2023-50571
easy-rules-mvel v4.1.0 was discovered to contain a remote code execution RCE vulnerability via the component MVELRule...
Remote Code Execution
org.jeasy, easy-rules-mvel is vulnerable to Remote Code Execution RCE. The vulnerability is due to the execution of class files with the same name as the Zer file from methods then and when while loading Zer files into an application. An attacker can write a class file with same name as a Zer fil...
easy-rules-mvel vulnerable to remote code execution
easy-rules-mvel v4.1.0 was discovered to contain a remote code execution RCE vulnerability via the component mVELRule...
GHSA-FGWC-3J6W-CH22 easy-rules-mvel vulnerable to remote code execution
easy-rules-mvel v4.1.0 was discovered to contain a remote code execution RCE vulnerability via the component mVELRule...
cn.sparrowmini:sparrow-bpm (=0.0.1), cn.sparrowmini:sparrow-form (=0.0.1) +13 more potentially affected by CVE-2023-50571 via org.jeasy:easy-rules-mvel (>=4.0.0 <=4.1.0)
org.jeasy:easy-rules-mvel MAVEN version =4.0.0, =0.0.1, =0.0.1, =1.0, =2025.02, =2025.11, =2025.02, =2025.02, =2025.02, =2025.02, =3, =1.14.0, =1.14.0, =4.0.0, =4.1.0 Source cves: CVE-2023-50571 Source advisory: OSV:GHSA-FGWC-3J6W-CH22...
CVE-2023-50571
easy-rules-mvel v4.1.0 was discovered to contain a remote code execution RCE vulnerability via the component MVELRule...
CVE-2023-50571
easy-rules-mvel v4.1.0 was discovered to contain a remote code execution RCE vulnerability via the component MVELRule...
CVE-2023-50571
easy-rules-mvel v4.1.0 was discovered to contain a remote code execution RCE vulnerability via the component MVELRule...
Remote code execution
easy-rules-mvel v4.1.0 was discovered to contain a remote code execution RCE vulnerability via the component MVELRule...
PT-2023-31594 · Unknown · Easy-Rules-Mvel
Name of the Vulnerable Software and Affected Versions: easy-rules-mvel version 4.1.0 Description: The issue is related to a remote code execution RCE vulnerability via the component MVELRule. This allows for potential exploitation, but specific details about the estimated number of affected devic...
CVE-2023-50571
CVE-2023-50571 affects easy-rules-mvel v4.1.0, with a remote code execution (RCE) vulnerability exploitable via the MVELRule component. The available sources in the provided documents identify the affected software and the existence of RCE, but do not include concrete patch versions or remediatio...
Easy Rules Security Vulnerability
Easy Rules is a Java rules engine from Jeasy open source. A security vulnerability exists in Easy Rules version v4.1.0, which originates from the ability to execute remote code via the component MVELRule...
CVE-2023-50571
easy-rules-mvel v4.1.0 was discovered to contain a remote code execution RCE vulnerability via the component MVELRule...