dropwizard

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

dropwizard records in CISA KEV

No dropwizard vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Dropwizard Validation 2 records HIGH

Records

2 records in Dropwizard Validation · all components

TI-2020-04301 CVE-2020-5245 · GHSA-3mcp-9wr4-cjqf

Remote Code Execution (RCE) vulnerability in dropwizard-validation

HIGH 73

Dropwizard-Validation before 1.3.19, and 2.0.2 may allow arbitrary code execution on the host system, with the privileges of the Dropwizard service account, by injecting arbitrary Java Expression Language expressions whe…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03053 Published 2020-02-24 Fixed in 1.3.19, 2.0.2 CWE-74

TI-2020-08876 CVE-2020-11002 · GHSA-8jpx-m2wh-2v34

Remote Code Execution (RCE) vulnerability in dropwizard-validation

MEDIUM 46

dropwizard-validation before versions 2.0.3 and 1.3.21 has a remote code execution vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05175 Published 2020-04-10 Fixed in 1.3.21, 2.0.3 CWE-74

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0