CVE-2013-6468

JBoss Drools, Red Hat JBoss BRMS before 6.0.1, and Red Hat JBoss BPM Suite before 6.0.1 allows remote authenticated users to execute arbitrary Java code via a (1) MVFLEX Expression Language (MVEL) or (2) Drools expression.

Score

CVSS 2.0 6.5 Medium

Status

Modified - secalert@redhat.com

Published

2014-04-10

Last modified

2024-08-06

Weaknesses

CWE-94

Affected products

• Jboss Bpm Suite (Redhat)
• Jboss Drools (Redhat)
• Jboss Enterprise Brms Platform (Redhat)

References

• http://rhn.redhat.com/errata/RHSA-2014-0371.html
• http://rhn.redhat.com/errata/RHSA-2014-0372.html
• http://secunia.com/advisories/57716
• http://secunia.com/advisories/57719