4 ms·
The technical details can be found here: https://www.aspectsecurity.com/uploads/downloads/2012/12/Remote-Code-with-Expression-Language-Injection.pdf https://www
by mh8h 14y ago
The technical details can be found here: https://www.aspectsecurity.com/uploads/downloads/2012/12/Remote-Code-with-Expression-Language-Injection.pdf https://www.aspectsecurity.com/uploads/downloads/2012/12/Rem...
- brown9-2 14y agoSo these guys have issued a new report for an issue first announced/reported in 2011? I'm missing what new discovery they've made, beyond the misleading count of how many people have downloaded the jars from a maven repository.
- matdrewin 14y agoYeah, I guess they are just re-interating that a lot of people are still on 3.0.5 and they might want to look at upgrading. Here's the original article: http://www.mindedsecurity.com/fileshare/ExpressionLanguageInjection.pdf http://www.mindedsecurity.com/fileshare/ExpressionLanguageIn...