9.8

CVE-2020-9297

Netflix Titus, all versions prior to version v0.1.1-rc.274, uses Java Bean Validation (JSR 380) custom constraint validators. When building custom constraint violation error messages, different types of interpolation are supported, including Java EL expressions. If an attacker can inject arbitrary data in the error message template being passed to ConstraintValidatorContext.buildConstraintViolationWithTemplate() argument, they will be able to run arbitrary Java code.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netflix ≫ Titus Version <= 0.1.0
Netflix ≫ Titus Version 0.1.1 Update -
Netflix ≫ Titus Version 0.1.1 Update rc244
Netflix ≫ Titus Version 0.1.1 Update rc260
Netflix ≫ Titus Version 0.1.1 Update rc261
Netflix ≫ Titus Version 0.1.1 Update rc262
Netflix ≫ Titus Version 0.1.1 Update rc263
Netflix ≫ Titus Version 0.1.1 Update rc264
Netflix ≫ Titus Version 0.1.1 Update rc265
Netflix ≫ Titus Version 0.1.1 Update rc266
Netflix ≫ Titus Version 0.1.1 Update rc267
Netflix ≫ Titus Version 0.1.1 Update rc268
Netflix ≫ Titus Version 0.1.1 Update rc269
Netflix ≫ Titus Version 0.1.1 Update rc270
Netflix ≫ Titus Version 0.1.1 Update rc271
Netflix ≫ Titus Version 0.1.1 Update rc272
Netflix ≫ Titus Version 0.1.1 Update rc273
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.86% 0.773
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

The product constructs all or part of an expression language (EL) statement in a framework such as a Java Server Page (JSP) using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended EL statement before it is executed.

https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2020-002.md
Patch
Third Party Advisory