Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Unomi

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2020-13942 Public exploit EPSS 69%

    Remote Code Execution in Apache Unomi

    It is possible to inject malicious OGNL or MVEL scripts into the /context.json public endpoint. This was partially fixed in 1.5.1 but a new attack vector was found. In Apache Unomi version 1.5.2 scripts are now completely filtered from the input. It is highly…

    Apache Software Foundation Apache Unomi org.apache.unomi:unomi Maven