Product · The Eclipse Foundation

Jakarta Expression Language Implementation

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.3

CVE-2021-28170

Improper Input Validation in Jakarta Expression Language

In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid.

The Eclipse Foundation Jakarta Expression Language Implementation jakarta-el-api jakarta-el-api Debian Ubuntu Maven

May 26, 2021