| عنوان | WuKongOpenSource Wukong_nocode <=latest AviatorScript Inject RCE |
|---|
| الوصف | In ExpressionUtil.java, AviatorEvaluator is used to directly execute expression functionality without any configured security policies, leading to potential AviatorScript injection vulnerabilities (which by default can execute arbitrary static methods).
This vulnerability applies to wukongcrm's background no code platform feature
|
|---|
| المصدر | ⚠️ https://github.com/WuKongOpenSource/Wukong_nocode/issues/4 |
|---|
| المستخدم | aftersnow (UID 71336) |
|---|
| ارسال | 02/07/2024 04:54 AM (2 سنوات منذ) |
|---|
| الاعتدال | 10/07/2024 12:11 PM (8 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 271051 [WuKongOpenSource Wukong_nocode حتى 20230807 AviatorScript ExpressionUtil.java تجاوز الصلاحيات] |
|---|
| النقاط | 18 |
|---|