Skip to content
OpenAdvisories

Package · Maven

com.nepxion:discovery

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.4
    CVE-2022-23463

    SpEL Injection in Nepxion Discovery

    Nepxion Discovery is a solution for Spring Cloud. Discover is vulnerable to SpEL Injection in discovery-commons. DiscoveryExpressionResolver’s eval method is evaluating expression with a StandardEvaluationContext, allowing the expression to reach and interact…

    Nepxion Discover com.nepxion:discovery Maven
  • Medium 4.3
    CVE-2022-23464

    Potential Server Side Request Forgery (SSRF) in Nepxion Discovery

    Nepxion Discovery is a solution for Spring Cloud. Discovery is vulnerable to a potential Server-Side Request Forgery (SSRF). RouterResourceImpl uses RestTemplate’s getForEntity to retrieve the contents of a URL containing user-controlled input, potentially re…

    Nepxion Discovery com.nepxion:discovery Maven