CWE-917: EL Injection
The product constructs all or part of an expression language (EL) statement in a framework such as a Java Server Page (JSP) using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended EL statement before it is executed.
Also known as Improper Neutralization of Special Elements used in an Expression Language Statement, Expression Language Injection.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- hitachi tuning managerEL Injection Vulnerability in Hitachi Tuning Manager8.6 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreImproper Neutralization of Special Elements in mintplex-labs/anything-llm4.9 Medium
- voltronic power viewpower pro, voltronicpower viewpower +1 moreVoltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability9.8 Critical
- hitachi global link managerEL Injection Vulnerability in Hitachi Global Link Manager7.6 High
- chef inspec, progress software chef inspec +1 moreInSpec Archive Command Vulnerable to Maliciously Crafted Profile8.8 High
- sofastack sofarpc, sofa-rpc +1 moreSOFARPC Remote Command Execution (RCE) Vulnerability9.8 Critical
- hitachi replication managerEL Injection Vulnerability in Hitachi Replication Manager7.3 High
- apache ambariApache Ambari: Allows authenticated metrics consumers to perform RCE8.0 High
- apache ambariApache Ambari: A malicious authenticated user can remotely execute arbitrary code in the context of the application.8.0 High
- apache jenaApache Jena: Exposure of execution in script engine expressions.8.8 High
- apache jenaApache Jena: Exposure of arbitrary execution in script engine expressions.5.4 Medium
- vmware spring frameworkSpring Framework vulnerable to denial of service6.5 Medium
- databasirDatabasir v1.0.7 was discovered to contain a remote code execution (RCE) vulnerability via the...9.8 Critical
- vmware spring frameworkSpring Framework vulnerable to denial of service via specially crafted SpEL expression6.5 Medium
- puzzle liimaLiima before 1.17.28 allows server-side template injection.9.8 Critical
- typo3TYPO3 contains Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration5.7 Medium
- nepxion discover, discovery +1 moreSpEL Injection in Nepxion Discovery9.4 Critical
- mendix, siemens mendix applications using mendix 9, mendix applications using mendix 9 (v9.12) +2 moreA vulnerability has been identified in Mendix Applications using Mendix 9 (All versions >= V9.11 ...6.5 Medium
- vmware spring data mongodbSpEL Injection in Spring Data MongoDB9.8 Critical
- atlassian confluence server, confluence data center, confluence server/data center +2 moreIn affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists...9.8 Critical
- canon irisnextThe BeanShell components of IRISNext through 9.8.28 allow execution of arbitrary commands on the...8.8 High
- geoserverImproper Input Validation in GeoServer7.2 High
- geotoolsUnchecked JNDI lookups in GeoTools8.2 High
- apache strutsForced OGNL evaluation, when evaluated on raw not validated user input in tag attributes, may lead to RCE.9.8 Critical
- vmware spring cloud function, vmware tanzu spring cloud, oracle banking branch +26 more +28 moreSpring Cloud Function Code Injection with a specially crafted SpEL as a routing expression9.8 Critical
- vmware spring cloud gateway, oracle commerce guided search, communications cloud native core binding support function +7 more +9 moreSpring Cloud Gateway vulnerable to Code Injection when Gateway Actuator endpoint enabled, exposed, unsecured10.0 Critical
- apache log4j, log4j2, cvat computer vision annotation tool +53 more +55 moreApache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack9.0 Critical
- apache log4j, log4j2, apple xcode +141 more +143 moreApache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints10.0 Critical
- eclipse ketiArbitrary Groovy script evaluation in Eclipse Keti8.2 High
- atlassian confluence server, confluence server and data center, confluence data center +2 moreIn affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists...9.8 Critical
- objectplanet opinioObjectPlanet Opinio before 7.14 allows Expression Language Injection via the admin/permissionList...7.5 High
- eclipse jakarta expression language, the eclipse foundation jakarta expression language implementation, oracle communications cloud native core policy +2 more +4 moreImproper Input Validation in Jakarta Expression Language5.3 Medium
- sap scimonoRemote Code Execution in SCIMono8.1 High
- apache struts, oracle business intelligence, communications diameter intelligence hub +5 more +7 moreRemote code execution in Apache Struts9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA iccselectrules expression language injection remote code execution vulnerability was discovered...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA perfaddormoddevicemonitor expression language injection remote code execution vulnerability was...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA ictexpertcsvdownload expression language injection remote code execution vulnerability was...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA devicethresholdconfig expression language injection remote code execution vulnerability was...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA devsoftsel expression language injection remote code execution vulnerability was discovered in...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA deviceselect expression language injection remote code execution vulnerability was discovered...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA faultflasheventselectfact expression language injectionremote code execution vulnerability was...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA userselectpagingcontent expression language injection remote code execution vulnerability was...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA reportpage index expression language injection remote code execution vulnerability was...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA powershellconfigcontent expression language injection remote code execution vulnerability was...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA tvxlanlegend expression language injection remote code execution vulnerability was discovered...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA viewbatchtaskresultdetailfact expression language injection remote code execution vulnerability...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA forwardredirect expression language injection remote code execution vulnerability was...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA sshconfig expression language injection remote code execution vulnerability was discovered in...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA smsrulesdownload expression language injection remote code execution vulnerability was...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA ictexpertdownload expression language injection remote code execution vulnerability was...8.8 High
- Show moreLoading…