NetSight
high7.8

CVE-2023-50571

easy-rules-mvel vulnerable to remote code execution

Impact

easy-rules-mvel v4.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component `mVELRule`.

Affected packages

EcosystemPackageAffectedFixed in
mavenorg.jeasy:easy-rules-mvel= 4.1.0none recorded

Affected products

VendorProductAffected versions
JeasyEasy Rules
Version 4.1.0

References