Skip to content
Threat Feed
Subscribe

Product

Unomi (< 1.5.2)

1 brief RSS
high advisory

Apache Unomi: Remote Code Execution via MVEL/OGNL Injection (CVE-2020-13942)

Apache Unomi versions prior to 1.5.2 are vulnerable to remote code execution (RCE) via crafted MVEL or OGNL expressions injected into the /context.json endpoint.

Unomi apache-unomi rce expression-injection cve-2020-13942
1r 2t 1c