Design/Logic Flaw

2019-12-0315:15:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.4%

Zanata 3.0.0 through 3.1.2 has RCE due to EL interpolation in logging

CPENameOperatorVersion
zanatage3.0.0
zanatale3.1.2

CPE	Name	Operator	Version
	zanata	ge	3.0.0
	zanata	le	3.1.2

References

access.redhat.com/security/cve/cve-2013-4486

bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4486

github.com/zanata/zanata-server/wiki/Security-advisories