CVE-2020-9297

CRITICAL

9.8

Description

Netflix Titus, all versions prior to version v0.1.1-rc.274, uses Java Bean Validation (JSR 380) custom constraint validators. When building custom constraint violation error messages, different types of interpolation are supported, including Java EL expressions. If an attacker can inject arbitrary data in the error message template being passed to ConstraintValidatorContext.buildConstraintViolationWithTemplate() argument, they will be able to run arbitrary Java code.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published7/14/2020

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

netflix:titus

Weaknesses (CWE)

CWE-917

References

https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2020-002.md(security-report@netflix.com)

https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2020-002.md(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.