Skip to content
OpenAdvisories

Product · Eclipse Foundation

keti

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2021-32834

    Arbitrary Groovy script evaluation in Eclipse Keti

    Eclipse Keti is a service that was designed to protect RESTfuls API using Attribute Based Access Control (ABAC). In Keti a user able to create Policy Sets can run arbitrary code by sending malicious Groovy scripts which will escape the configured Groovy sandb…

    Eclipse Foundation keti