Vulnerability: Apache Unomi <1.5.2 - Remote Code Execution

Apache Unomi allows conditions to use OGNL and MVEL scripting which offers the possibility to call static Java classes from the JDK that could execute code with the permission level of the running Java process. This vulnerability affects all versions of Apache Unomi prior to 1.5.2.

Impact

Successful exploitation of this vulnerability can allow an attacker to execute arbitrary code on the affected server.

Severity

critical

Verified

Unknown