Skip to content
OpenAdvisories

Vendor

Nepxion

2 known vulnerabilities.

Products

Discover 1 Discovery 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2022-23463

    SpEL Injection in Nepxion Discovery

    Nepxion Discovery is a solution for Spring Cloud. Discover is vulnerable to SpEL Injection in discovery-commons. DiscoveryExpressionResolver’s eval method is evaluating expression with a StandardEvaluationContext, allowing the expression to reach and interact…

    Nepxion Discover com.nepxion:discovery Maven