Description
JBoss Overlord Run Time Governance (RTGov) 1.0 for JBossAS allows remote authenticated users to execute arbitrary Java code via an MVFLEX Expression Language (MVEL) expression. NOTE: some of these details are obtained from third party information.
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1051279
- 57843 third-party-advisory