Dropwizard Validation

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-11002 Maven HIGH POC PATCH This Week

dropwizard-validation before versions 2.0.3 and 1.3.21 has a remote code execution vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Java RCE Dropwizard Validation

NVD GitHub

CVSS 3.1

8.8

EPSS

5.2%

CVE-2020-5245 Maven HIGH POC PATCH This Week

Dropwizard-Validation before 1.3.19, and 2.0.2 may allow arbitrary code execution on the host system, with the privileges of the Dropwizard service account, by injecting arbitrary Java Expression. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Java RCE Dropwizard Validation Blockchain Platform

NVD GitHub

CVSS 3.1

8.8

EPSS

3.1%

CVE-2020-11002 Maven

EPSS 5% CVSS 8.8

HIGH POC PATCH This Week

Java RCE Dropwizard Validation

NVD GitHub

CVE-2020-5245 Maven

EPSS 3% CVSS 8.8

HIGH POC PATCH This Week

Java RCE Dropwizard Validation +1

NVD GitHub