Description
ObjectPlanet Opinio before 7.14 allows Expression Language Injection via the admin/permissionList.do from parameter. This can be used to retrieve possibly sensitive serverInfo data.
Unscored
CVE-2020-26565
EUVD-2020-19110GHSA-q6h6-58j2-2f5m
ObjectPlanet Opinio before 7.14 allows Expression Language Injection via the admin/permissionList.do from parameter. This can be used to re…
Published Jul 31, 2021 · Updated Aug 4, 2024 · Assigned by mitre