Not rated

CVE-2021-28170 In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid…

Description

In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid.

Affected products and versions

Product	Affected versions	Fixed in
Jakarta Expression Language Implementation 3.0	earliest → 3.0.3	No fix stated

Do you use Jakarta Expression Language Implementation?

Track this CVE Watch Jakarta Expression Language Implementation Check my SBOMs

www.cveye.io/en/cve/CVE-2021-28170

Timeline

Published May 26, 2021
Last modified August 3, 2024

References

github.com github.com
securitylab.github.com securitylab.github.com
www.oracle.com www.oracle.com

Track this CVE