Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2020/04/10 6:42 p.m.143 views

Remote Code Execution (RCE) vulnerability in dropwizard-validation

Summary A server-side template injection was identified in the self-validating @SelfValidating feature of dropwizard-validation enabling attackers to inject arbitrary Java EL expressions, leading to Remote Code Execution RCE vulnerability. If you're using a self-validating bean via @SelfValidatin...

9CVSS1.1AI score0.05175EPSS
SaveExploits1References9Affected Software1
Rows per page
Query Builder