High · 7.8 CVE-2023-50571 EUVD-2023-3197GHSA-fgwc-3j6w-ch22

easy-rules-mvel vulnerable to remote code execution

Published Dec 29, 2023 · Updated Aug 2, 2024 · Assigned by mitre

Description

easy-rules-mvel v4.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component MVELRule.

Ecosystem	Package	Affected	Fixed	Record
Maven	org.jeasy:easy-rules-mvel	4.1.0	—	GHSA-fgwc-3j6w-ch22