Vulnerability Description
It is possible to inject malicious OGNL or MVEL scripts into the /context.json public endpoint. This was partially fixed in 1.5.1 but a new attack vector was found. In Apache Unomi version 1.5.2 scripts are now completely filtered from the input. It is highly recommended to upgrade to the latest available version of the 1.5.x release to fix this problem.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache | Unomi | >= 1.5.0, < 1.5.2 |
Related Weaknesses (CWE)
References
- http://unomi.apache.org./security/cve-2020-13942.txtMailing ListVendor Advisory
- http://www.openwall.com/lists/oss-security/2020/11/24/5Mailing ListThird Party Advisory
- https://advisory.checkmarx.net/advisory/CX-2020-4284ExploitThird Party Advisory
- https://lists.apache.org/thread.html/r08a4057ff7196b8880117edaa4b6207cbd36ed692d
- https://lists.apache.org/thread.html/r4a8fa91836687eaca42b5420a778ca8c8fd3a3740e
- https://lists.apache.org/thread.html/r4a8fa91836687eaca42b5420a778ca8c8fd3a3740e
- https://lists.apache.org/thread.html/r79672c25e0ef9bb4b9148376281200a8e61c6d5ef5
- https://lists.apache.org/thread.html/rcb6d2eafcf15def433aaddfa06738e5faa5060cef2
- https://lists.apache.org/thread.html/rcb6d2eafcf15def433aaddfa06738e5faa5060cef2
- http://unomi.apache.org./security/cve-2020-13942.txtMailing ListVendor Advisory
- http://www.openwall.com/lists/oss-security/2020/11/24/5Mailing ListThird Party Advisory
- https://advisory.checkmarx.net/advisory/CX-2020-4284ExploitThird Party Advisory
- https://lists.apache.org/thread.html/r08a4057ff7196b8880117edaa4b6207cbd36ed692d
- https://lists.apache.org/thread.html/r4a8fa91836687eaca42b5420a778ca8c8fd3a3740e
- https://lists.apache.org/thread.html/r4a8fa91836687eaca42b5420a778ca8c8fd3a3740e
FAQ
What is CVE-2020-13942?
CVE-2020-13942 is a vulnerability with a CVSS score of 9.8 (CRITICAL). It is possible to inject malicious OGNL or MVEL scripts into the /context.json public endpoint. This was partially fixed in 1.5.1 but a new attack vector was found. In Apache Unomi version 1.5.2 scrip...
How severe is CVE-2020-13942?
CVE-2020-13942 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2020-13942?
Check the references section above for vendor advisories and patch information. Affected products include: Apache Unomi.