[<prev] [next>] [day] [month] [year] [list]
Message-ID: <CA+ZBtZ5dRpp15h_OExLFuaPR=dEBeB-VYRCjA+omzNq23p=9cQ@mail.gmail.com>
Date: Tue, 25 Jan 2022 19:53:03 +0800
From: Zhang Yonglun <zhangyonglun@...che.org>
To: oss-security@...ts.openwall.com, dev@...nyu.apache.org
Subject: CVE-2021-45029: Groovy Code Injection & SpEL Injection in Apache
ShenYu 2.4.1
Description:
Groovy Code Injection & SpEL Injection which lead to Remote Code
Execution. This issue affected Apache ShenYu 2.4.0 and 2.4.1.
--
Zhang Yonglun
Apache ShenYu (Incubating)
Apache ShardingSphere
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
