Convertigo
Monthly
Unrestricted use of Apache commons-jxpath in Convertigo's TwsCachedXPathAPI (through version 8.3.4) lets XPath expressions invoke arbitrary Java extension functions, exposing the low-code platform to code execution and data exposure via crafted XPath. The upstream fix in 8.3.11 wraps every JXPath context with an empty FunctionLibrary, disabling extension-function resolution. Publicly available proof-of-concept exists via the project's own GitHub issue #898, though EPSS remains low at 0.13% (32nd percentile) and it is not on CISA KEV.
Unrestricted use of Apache commons-jxpath in Convertigo's TwsCachedXPathAPI (through version 8.3.4) lets XPath expressions invoke arbitrary Java extension functions, exposing the low-code platform to code execution and data exposure via crafted XPath. The upstream fix in 8.3.11 wraps every JXPath context with an empty FunctionLibrary, disabling extension-function resolution. Publicly available proof-of-concept exists via the project's own GitHub issue #898, though EPSS remains low at 0.13% (32nd percentile) and it is not on CISA KEV.