Skip to content
OpenAdvisories

Package · Maven

com.netflix.conductor:conductor-core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2020-9296

    Expression Language Injection in Netflix Conductor

    Netflix Titus uses Java Bean Validation (JSR 380) custom constraint validators. When building custom constraint violation error messages, different types of interpolation are supported, including Java EL expressions. If an attacker can inject arbitrary data i…

    com.netflix.conductor:conductor-core Maven