CVE-2023-51079

A long execution time can occur in the ParseTools.subCompileExpression method in MVEL 2.5.0.Final because of many Java class lookups

published December 27, 2023

CVSS
—
EPSS
1%
Percentile
54.0
In the wild
Unconfirmed
What it is

A long execution time can occur in the ParseTools.subCompileExpression method in MVEL 2.5.0.Final because of many Java class lookups. NOTE: the vendor disputes this because "the only thing that you could expect is that the parser will take a crazy amount of time to complete its task."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00737 · 54.0th percentile
Published
2023-12-27T00:00Z
EPSS history
Timeline
  • 27 DEC 00:00Z
    A long execution time can occur in the ParseTools.subCompileExpression method in MVEL 2.5.0.Final because of many Java class lookups
    cvelistv5