Nuxeo NuxeoUnknownResource Expression Language Injection

Strike ID:
G21-5mhh1
CVSS:
7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)
False Positive:
t
Variants:
1
Year:
2019

Description

This strike exploits a input validation error vulnerability in Nuxeo Nuxeo. The vulnerability can be triggered by an attacker. Exploitation of this vulnerability results in code execution

CVE

References