Remote Code Execution

org.jeasy, easy-rules-mvel is vulnerable to Remote Code Execution (RCE). The vulnerability is due to the execution of class files with the same name as the Zer file from methods then and when while loading Zer files into an application. An attacker can write a class file with same name as a Zer file (passed as an argument to then and when methods) into the current class path leading to Remote Code Execution (RCE) when that Zer file is loaded into the application.