org.apache.unomi:unomi-common@1.4.0 vulnerabilities
-
latest version
2.4.0
-
latest non vulnerable version
-
first published
6 years ago
-
latest version published
8 months ago
-
licenses detected
- [1.3.0-incubating,)
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.apache.unomi:unomi-common package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.| Vulnerability | Vulnerable Version |
|---|---|
org.apache.unomi:unomi-common is a package that stores user profile information and is mostly used to provide a backend server for A/B testing and personalization. Affected versions of this package are vulnerable to Remote Code Execution (RCE). It is possible to inject malicious OGNL or MVEL scripts into the How to fix Remote Code Execution (RCE)? Upgrade |
[,1.5.2)
|
org.apache.unomi:unomi-common is a package that stores user profile information and is mostly used to provide a backend server for A/B testing and personalization. Affected versions of this package are vulnerable to Remote Code Execution (RCE). It allows conditions to use OGNL scripting which offers the possibility to call static Java classes from the JDK that could execute code with the permission level of the running Java process. How to fix Remote Code Execution (RCE)? Upgrade |
[,1.5.1)
|