Lucene search
Veracode Vulnerability DatabaseVERACODE:25619HistoryJun 08, 2020 - 2:00 a.m.
Arbitrary Code Execution
2020-06-0802:00:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
EPSS
0.006
Percentile
78.7%
unomi-plugins-base is vulnerable to arbitrary code execution. The vulnerability exists due to the lack of checks on the permitted classes to be executed when evaluating a property condition.
References
unomi.apache.org/security/cve-2020-11975.txt
github.com/apache/unomi/commit/789ae8e820c507866b9c91590feebffa4e996f5e
github.com/apache/unomi/pull/158
lists.apache.org/thread.html/r01021bc4b25c1e98812efca0b07f0e078a6281bd52f7c3817a429d95@%3Ccommits.unomi.apache.org%3E
lists.apache.org/thread.html/r79672c25e0ef9bb4b9148376281200a8e61c6d5ef5bb705e9a363460@%3Ccommits.unomi.apache.org%3E
Related
cve
cve
CVE-2020-11975
2020-06-05 15:15:10
nvd
nvd
CVE-2020-11975
2020-06-05 15:15:10
prion
prion
Design/Logic Flaw
2020-06-05 15:15:00
cvelist
cvelist
CVE-2020-11975
2020-06-05 14:10:57
osv
osv
Improper Input Validation in Apache Unomi
2022-02-09 23:20:47
CVE-2020-11975
2020-06-05 15:15:10
github
github
Improper Input Validation in Apache Unomi
2022-02-09 23:20:47
githubexploit
githubexploit
Exploit for Injection in Apache Unomi
2021-01-11 15:50:27
Exploit for Vulnerability in Apache Unomi
2020-11-24 05:23:42
Exploit for Injection in Apache Unomi
2020-11-19 08:22:17
veracode
veracode
Remote Code Execution
2020-11-19 11:31:23