1 matches found
JEXL Expression Sandbox Bypass
org.opennms, opennms-util are vulnerable to a JEXL expression sandbox bypass. The vulnerability is due to insufficient sandbox restrictions when processing crafted JEXL expressions through the Measurements REST API, which allows a low-privileged authenticated attacker to escape the sandbox and lo...
5.4CVSS6.3AI score0.00288EPSS
SaveExploits0References4Affected Software1
20