Lucene search
+L

1 matches found

CVE
CVE
•added 2025/08/18 8:09 p.m.•159 views

CVE-2025-53192

This Improper Neutralization of Expression/Command Delimiters vulnerability affects Apache Commons OGNL (all versions). The root cause is that the Ognl.getValue API parses and evaluates expressions with broad capabilities; while OgnlRuntime attempts to block dangerous classes like java.lang.Runti...

7.7AI score0.00557EPSS
Save