Expression Language Injection

2024-03-2605:25:08

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

openmetadata

vulnerability

expression language injection

compiledrule

validateexpression

authorization checks

arbitrary code

8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.0%

JSON

OpenMetadata is vulnerable to Expression Language Injection. The vulnerability is caused due to a lack of proper authorization checks, allowing attackers to execute arbitrary code by exploiting Expression language injection in the CompiledRule::validateExpression method.

CPENameOperatorVersion
openmetadata-servicele1.3.0
openmetadata-servicele1.3.0

CPE	Name	Operator	Version
	openmetadata-service	le	1.3.0
	openmetadata-service	le	1.3.0

References

codeql.github.com/codeql-query-help/java/java-spel-expression-injection/

github.com/open-metadata/OpenMetadata/security/advisories/GHSA-7vf4-x5m2-r6gr