Lucene search
+L

1 matches found

OSV
OSV
added 2024/04/23 9:11 p.m.14 views

GHSA-7VF4-X5M2-R6GR OpenMetadata vulnerable to SpEL Injection in `PUT /api/v1/policies` (`GHSL-2023-252`)

SpEL Injection in PUT /api/v1/policies GHSL-2023-252 Please note, only authenticated users have access to PUT / POST APIS for /api/v1/policies. Non authenticated users will not be able to access these APIs to exploit the vulnerability CompiledRule::validateExpression is also called from...

9.4CVSS6AI score0.12527EPSS
SaveExploits0References9
Rows per page
Query Builder