CVE-2022-25894

CRITICAL

uflo - Remote Code Execution via ExpressionContextImpl JEXL Expression Evaluation

Title source: llm

Description

All versions of the package com.bstek.uflo:uflo-core are vulnerable to Remote Code Execution (RCE) in the ExpressionContextImpl class via jexl.createExpression(expression).evaluate(context); functionality, due to improper user input validation.

References (3)

Core 3

Core References

Exploit, Third Party Advisory

https://fmyyy1.github.io/2022/10/23/uflo2rce/

Broken Link

https://github.com/youseries/uflo/blob/b3e198bc6523e5a6ba69edd84ba10e05a3b78726/uflo-core/src/main/java/com/bstek/uflo/expr/impl/ExpressionContextImpl.java%23L126

Third Party Advisory

https://security.snyk.io/vuln/SNYK-JAVA-COMBSTEKUFLO-3091112

Scores

CVSS v3 9.8

EPSS 0.0257

EPSS Percentile 83.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-94

Status published

Products (2)

com.bstek.uflo/uflo-core 0Maven

uflo_project/uflo

Published Jan 26, 2023

Tracked Since Feb 18, 2026