Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-28170

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-v6w3-2prq-h95f

Improper Input Validation in Jakarta Expression Language In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid.

gitlab/maven/com.sun.el/el-ri/CVE-2021-28170

Improper Input Validation in Jakarta Expression Language In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid.

gitlab/maven/org.eclipse.ee4j/project/CVE-2021-28170

Improper Input Validation In the Jakarta Expression Language implementation, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid.

gitlab/maven/org.glassfish/jakarta.el/CVE-2021-28170

Improper Input Validation in Jakarta Expression Language In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid.

gitlab/maven/org.glassfish/javax.el/CVE-2021-28170

Improper Input Validation in Jakarta Expression Language In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid.