The Eclipse Foundation Jakarta Expression Language Implementation vulnerabilities

1 known vulnerability affecting the_eclipse_foundation/jakarta_expression_language_implementation.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2021-28170MEDIUMCVSS 5.3≥ unspecified, ≤ 3.0.32021-05-26

CVE-2021-28170 [MEDIUM] CWE-20 CVE-2021-28170: In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManag In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid.