Uflo Project vulnerabilities
We track 1 vulnerability in Uflo Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 26, 2023.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Uflo Project vulnerabilities
- 9.8 Critical severity
com.bstek.uflo:uflo-core: Improper Control of Generation of Code
All versions of the package com.bstek.uflo:uflo-core are vulnerable to Remote Code Execution (RCE) in the ExpressionContextImpl class via jexl.createExpression(expression).evaluate(context); functionality, due to improper user input validation.