SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  Nuxeo Platform Expression Language Injection

Category: WEB-ATTACKS      

An expression language injection vulnerability has been reported in Nuxeo CMS. This vulnerability is due to insufficient validation of user supplied HTTP URIs.

References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16341


Relevant Information