CVE-2020-5245 (GCVE-0-2020-5245)
Vulnerability from cvelistv5
Published
2020-02-24 17:35
Modified
2024-08-04 08:22
Severity ?
7.9 (High) - CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L
CWE
  • CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Summary
Dropwizard-Validation before 1.3.19, and 2.0.2 may allow arbitrary code execution on the host system, with the privileges of the Dropwizard service account, by injecting arbitrary Java Expression Language expressions when using the self-validating feature. The issue has been fixed in dropwizard-validation 1.3.19 and 2.0.2.
References
security-advisories@github.com https://beanvalidation.org/2.0/spec/#validationapi-message-defaultmessageinterpolation Third Party Advisory
security-advisories@github.com https://docs.jboss.org/hibernate/validator/6.1/reference/en-US/html_single/#section-interpolation-with-message-expressions Third Party Advisory
security-advisories@github.com https://docs.oracle.com/javaee/7/tutorial/jsf-el.htm Third Party Advisory
security-advisories@github.com https://github.com/dropwizard/dropwizard/commit/28479f743a9d0aab6d0e963fc07f3dd98e8c8236
security-advisories@github.com https://github.com/dropwizard/dropwizard/commit/d87d1e4f8e20f6494c0232bf8560c961b46db634 Patch, Third Party Advisory
security-advisories@github.com https://github.com/dropwizard/dropwizard/pull/3157 Patch, Third Party Advisory
security-advisories@github.com https://github.com/dropwizard/dropwizard/pull/3160 Patch, Third Party Advisory
security-advisories@github.com https://github.com/dropwizard/dropwizard/security/advisories/GHSA-3mcp-9wr4-cjqf Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 https://beanvalidation.org/2.0/spec/#validationapi-message-defaultmessageinterpolation Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 https://docs.jboss.org/hibernate/validator/6.1/reference/en-US/html_single/#section-interpolation-with-message-expressions Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 https://docs.oracle.com/javaee/7/tutorial/jsf-el.htm Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 https://github.com/dropwizard/dropwizard/commit/28479f743a9d0aab6d0e963fc07f3dd98e8c8236
af854a3a-2127-422b-91ae-364da2661108 https://github.com/dropwizard/dropwizard/commit/d87d1e4f8e20f6494c0232bf8560c961b46db634 Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 https://github.com/dropwizard/dropwizard/pull/3157 Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 https://github.com/dropwizard/dropwizard/pull/3160 Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 https://github.com/dropwizard/dropwizard/security/advisories/GHSA-3mcp-9wr4-cjqf Exploit, Third Party Advisory
Impacted products
Vendor Product Version
dropwizard dropwizard-validation Version: >= 1.3.0, < 1.3.19
Version: >= 2.0.0, < 2.0.2
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2020-5245",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-06T14:57:55.801469Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-06T14:58:08.864Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T08:22:09.091Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "https://github.com/dropwizard/dropwizard/security/advisories/GHSA-3mcp-9wr4-cjqf",
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/dropwizard/dropwizard/security/advisories/GHSA-3mcp-9wr4-cjqf"
          },
          {
            "name": "https://github.com/dropwizard/dropwizard/pull/3157",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/dropwizard/dropwizard/pull/3157"
          },
          {
            "name": "https://github.com/dropwizard/dropwizard/pull/3160",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/dropwizard/dropwizard/pull/3160"
          },
          {
            "name": "https://github.com/dropwizard/dropwizard/commit/28479f743a9d0aab6d0e963fc07f3dd98e8c8236",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/dropwizard/dropwizard/commit/28479f743a9d0aab6d0e963fc07f3dd98e8c8236"
          },
          {
            "name": "https://github.com/dropwizard/dropwizard/commit/d87d1e4f8e20f6494c0232bf8560c961b46db634",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/dropwizard/dropwizard/commit/d87d1e4f8e20f6494c0232bf8560c961b46db634"
          },
          {
            "name": "https://beanvalidation.org/2.0/spec/#validationapi-message-defaultmessageinterpolation",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://beanvalidation.org/2.0/spec/#validationapi-message-defaultmessageinterpolation"
          },
          {
            "name": "https://docs.jboss.org/hibernate/validator/6.1/reference/en-US/html_single/#section-interpolation-with-message-expressions",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://docs.jboss.org/hibernate/validator/6.1/reference/en-US/html_single/#section-interpolation-with-message-expressions"
          },
          {
            "name": "https://docs.oracle.com/javaee/7/tutorial/jsf-el.htm",
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://docs.oracle.com/javaee/7/tutorial/jsf-el.htm"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "dropwizard-validation",
          "vendor": "dropwizard",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 1.3.0, \u003c 1.3.19"
            },
            {
              "status": "affected",
              "version": "\u003e= 2.0.0, \u003c 2.0.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Dropwizard-Validation before 1.3.19, and 2.0.2 may allow arbitrary code execution on the host system, with the privileges of the Dropwizard service account, by injecting arbitrary Java Expression Language expressions when using the self-validating feature.\n\nThe issue has been fixed in dropwizard-validation 1.3.19 and 2.0.2."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.9,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-74",
              "description": "CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-06-05T16:42:31.207Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/dropwizard/dropwizard/security/advisories/GHSA-3mcp-9wr4-cjqf",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/dropwizard/dropwizard/security/advisories/GHSA-3mcp-9wr4-cjqf"
        },
        {
          "name": "https://github.com/dropwizard/dropwizard/pull/3157",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/dropwizard/dropwizard/pull/3157"
        },
        {
          "name": "https://github.com/dropwizard/dropwizard/pull/3160",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/dropwizard/dropwizard/pull/3160"
        },
        {
          "name": "https://github.com/dropwizard/dropwizard/commit/28479f743a9d0aab6d0e963fc07f3dd98e8c8236",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/dropwizard/dropwizard/commit/28479f743a9d0aab6d0e963fc07f3dd98e8c8236"
        },
        {
          "name": "https://github.com/dropwizard/dropwizard/commit/d87d1e4f8e20f6494c0232bf8560c961b46db634",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/dropwizard/dropwizard/commit/d87d1e4f8e20f6494c0232bf8560c961b46db634"
        },
        {
          "name": "https://beanvalidation.org/2.0/spec/#validationapi-message-defaultmessageinterpolation",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://beanvalidation.org/2.0/spec/#validationapi-message-defaultmessageinterpolation"
        },
        {
          "name": "https://docs.jboss.org/hibernate/validator/6.1/reference/en-US/html_single/#section-interpolation-with-message-expressions",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://docs.jboss.org/hibernate/validator/6.1/reference/en-US/html_single/#section-interpolation-with-message-expressions"
        },
        {
          "name": "https://docs.oracle.com/javaee/7/tutorial/jsf-el.htm",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://docs.oracle.com/javaee/7/tutorial/jsf-el.htm"
        }
      ],
      "source": {
        "advisory": "GHSA-3mcp-9wr4-cjqf",
        "discovery": "UNKNOWN"
      },
      "title": "Remote Code Execution (RCE) vulnerability in dropwizard-validation"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2020-5245",
    "datePublished": "2020-02-24T17:35:20",
    "dateReserved": "2020-01-02T00:00:00",
    "dateUpdated": "2024-08-04T08:22:09.091Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2020-5245\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2020-02-24T18:15:22.477\",\"lastModified\":\"2024-11-21T05:33:45.297\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Dropwizard-Validation before 1.3.19, and 2.0.2 may allow arbitrary code execution on the host system, with the privileges of the Dropwizard service account, by injecting arbitrary Java Expression Language expressions when using the self-validating feature.\\n\\nThe issue has been fixed in dropwizard-validation 1.3.19 and 2.0.2.\"},{\"lang\":\"es\",\"value\":\"Dropwizard-Validation versiones anteriores a 1.3.19 y 2.0.2, puede permitir una ejecuci\u00f3n de c\u00f3digo arbitraria en el host system, con los privilegios de la cuenta de servicio de Dropwizard, mediante la inyecci\u00f3n de expresiones arbitrarias de Java Expression Language cuando se utiliza la funcionalidad self-validating. El problema se ha corregido en dropwizard-validation versiones 1.3.19 y 2.0.2.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L\",\"baseScore\":7.9,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":1.3,\"impactScore\":6.0},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:S/C:C/I:C/A:C\",\"baseScore\":9.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":8.0,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-74\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-74\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dropwizard:dropwizard_validation:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.3.19\",\"matchCriteriaId\":\"6093F68F-E2FF-4A25-A709-79F315833DEF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dropwizard:dropwizard_validation:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.0.0\",\"versionEndExcluding\":\"2.0.2\",\"matchCriteriaId\":\"4522F31B-974E-4957-8A49-6B396C810720\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:blockchain_platform:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"21.1.2\",\"matchCriteriaId\":\"D0DBC938-A782-433F-8BF1-CA250C332AA7\"}]}]}],\"references\":[{\"url\":\"https://beanvalidation.org/2.0/spec/#validationapi-message-defaultmessageinterpolation\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://docs.jboss.org/hibernate/validator/6.1/reference/en-US/html_single/#section-interpolation-with-message-expressions\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://docs.oracle.com/javaee/7/tutorial/jsf-el.htm\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://github.com/dropwizard/dropwizard/commit/28479f743a9d0aab6d0e963fc07f3dd98e8c8236\",\"source\":\"security-advisories@github.com\"},{\"url\":\"https://github.com/dropwizard/dropwizard/commit/d87d1e4f8e20f6494c0232bf8560c961b46db634\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/dropwizard/dropwizard/pull/3157\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/dropwizard/dropwizard/pull/3160\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/dropwizard/dropwizard/security/advisories/GHSA-3mcp-9wr4-cjqf\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://beanvalidation.org/2.0/spec/#validationapi-message-defaultmessageinterpolation\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://docs.jboss.org/hibernate/validator/6.1/reference/en-US/html_single/#section-interpolation-with-message-expressions\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://docs.oracle.com/javaee/7/tutorial/jsf-el.htm\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://github.com/dropwizard/dropwizard/commit/28479f743a9d0aab6d0e963fc07f3dd98e8c8236\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://github.com/dropwizard/dropwizard/commit/d87d1e4f8e20f6494c0232bf8560c961b46db634\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/dropwizard/dropwizard/pull/3157\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/dropwizard/dropwizard/pull/3160\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/dropwizard/dropwizard/security/advisories/GHSA-3mcp-9wr4-cjqf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://github.com/dropwizard/dropwizard/security/advisories/GHSA-3mcp-9wr4-cjqf\", \"name\": \"https://github.com/dropwizard/dropwizard/security/advisories/GHSA-3mcp-9wr4-cjqf\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"https://github.com/dropwizard/dropwizard/pull/3157\", \"name\": \"https://github.com/dropwizard/dropwizard/pull/3157\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://github.com/dropwizard/dropwizard/pull/3160\", \"name\": \"https://github.com/dropwizard/dropwizard/pull/3160\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://github.com/dropwizard/dropwizard/commit/28479f743a9d0aab6d0e963fc07f3dd98e8c8236\", \"name\": \"https://github.com/dropwizard/dropwizard/commit/28479f743a9d0aab6d0e963fc07f3dd98e8c8236\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://github.com/dropwizard/dropwizard/commit/d87d1e4f8e20f6494c0232bf8560c961b46db634\", \"name\": \"https://github.com/dropwizard/dropwizard/commit/d87d1e4f8e20f6494c0232bf8560c961b46db634\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://beanvalidation.org/2.0/spec/#validationapi-message-defaultmessageinterpolation\", \"name\": \"https://beanvalidation.org/2.0/spec/#validationapi-message-defaultmessageinterpolation\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://docs.jboss.org/hibernate/validator/6.1/reference/en-US/html_single/#section-interpolation-with-message-expressions\", \"name\": \"https://docs.jboss.org/hibernate/validator/6.1/reference/en-US/html_single/#section-interpolation-with-message-expressions\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://docs.oracle.com/javaee/7/tutorial/jsf-el.htm\", \"name\": \"https://docs.oracle.com/javaee/7/tutorial/jsf-el.htm\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-04T08:22:09.091Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2020-5245\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-06-06T14:57:55.801469Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-06-06T14:58:03.428Z\"}}], \"cna\": {\"title\": \"Remote Code Execution (RCE) vulnerability in dropwizard-validation\", \"source\": {\"advisory\": \"GHSA-3mcp-9wr4-cjqf\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 7.9, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"vendor\": \"dropwizard\", \"product\": \"dropwizard-validation\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e= 1.3.0, \u003c 1.3.19\"}, {\"status\": \"affected\", \"version\": \"\u003e= 2.0.0, \u003c 2.0.2\"}]}], \"references\": [{\"url\": \"https://github.com/dropwizard/dropwizard/security/advisories/GHSA-3mcp-9wr4-cjqf\", \"name\": \"https://github.com/dropwizard/dropwizard/security/advisories/GHSA-3mcp-9wr4-cjqf\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://github.com/dropwizard/dropwizard/pull/3157\", \"name\": \"https://github.com/dropwizard/dropwizard/pull/3157\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/dropwizard/dropwizard/pull/3160\", \"name\": \"https://github.com/dropwizard/dropwizard/pull/3160\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/dropwizard/dropwizard/commit/28479f743a9d0aab6d0e963fc07f3dd98e8c8236\", \"name\": \"https://github.com/dropwizard/dropwizard/commit/28479f743a9d0aab6d0e963fc07f3dd98e8c8236\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/dropwizard/dropwizard/commit/d87d1e4f8e20f6494c0232bf8560c961b46db634\", \"name\": \"https://github.com/dropwizard/dropwizard/commit/d87d1e4f8e20f6494c0232bf8560c961b46db634\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://beanvalidation.org/2.0/spec/#validationapi-message-defaultmessageinterpolation\", \"name\": \"https://beanvalidation.org/2.0/spec/#validationapi-message-defaultmessageinterpolation\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://docs.jboss.org/hibernate/validator/6.1/reference/en-US/html_single/#section-interpolation-with-message-expressions\", \"name\": \"https://docs.jboss.org/hibernate/validator/6.1/reference/en-US/html_single/#section-interpolation-with-message-expressions\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://docs.oracle.com/javaee/7/tutorial/jsf-el.htm\", \"name\": \"https://docs.oracle.com/javaee/7/tutorial/jsf-el.htm\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Dropwizard-Validation before 1.3.19, and 2.0.2 may allow arbitrary code execution on the host system, with the privileges of the Dropwizard service account, by injecting arbitrary Java Expression Language expressions when using the self-validating feature.\\n\\nThe issue has been fixed in dropwizard-validation 1.3.19 and 2.0.2.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-74\", \"description\": \"CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2024-06-05T16:42:31.207Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2020-5245\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-08-04T08:22:09.091Z\", \"dateReserved\": \"2020-01-02T00:00:00\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2020-02-24T17:35:20\", \"assignerShortName\": \"GitHub_M\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.