Lucene search

K
githubGitHub Advisory DatabaseGHSA-H63J-XQX6-W58R
HistoryDec 27, 2023 - 9:31 p.m.

mvel2 TimeOut error exists in the ParseTools.subCompileExpression method

2023-12-2721:31:01
GitHub Advisory Database
github.com
5
timeout error
parsetools
subcompileexpression
software vulnerability
mvel2 v2.5.0

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

19.8%

A TimeOut error exists in the ParseTools.subCompileExpression method in mvel2 v2.5.0 Final.

Affected configurations

Vulners
Node
org.mvel\Matchmvel22.5.0.final
VendorProductVersionCPE
*org.mvel\mvel2cpe:2.3:a:*:org.mvel\:mvel2:2.5.0.final:*:*:*:*:*:*:*

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

19.8%