Lucene search

K
zdi06fe5fd2bc53027c4a3b7e395af0b850e7b8a044ZDI-23-1896
HistoryDec 20, 2023 - 12:00 a.m.

(0Day) Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability

2023-12-2000:00:00
06fe5fd2bc53027c4a3b7e395af0b850e7b8a044
www.zerodayinitiative.com
6
vulnerability
voltronic power viewpower pro
remote code execution
struts2 dependency
expression language injection
arbitrary code
local service

8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.0%

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Struts2 dependency. The issue results from the use of a library that is vulnerable to expression language injection. An attacker can leverage this vulnerability to execute code in the context of LOCAL SERVICE.

8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.0%

Related for ZDI-23-1896