critical9.8
CVE-2021-41862
Expression injection in AviatorScript
Impact
AviatorScript through 5.2.7 allows code execution via an expression that is encoded with Byte Code Engineering Library (BCEL).
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | com.googlecode.aviator:aviator | >= 5.2.1, <= 5.2.7 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aviatorscript Project | Aviatorscript | from 5.2.1 |