En bref
- CVE-2025-2622 est une vulnérabilité ÉLEVÉE (CVSS 8.8) touchant com.aizuda:snail-job, snail-job (aizuda).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.74%, plus élevée que 55.0% des vulnérabilités.
- Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.
Description
A vulnerability was found in aizuda snail-job 1.4.0. It has been classified as critical. Affected is the function getRuntime of the file /snail-job/workflow/check-node-expression of the component Workflow-Task Management Module. The manipulation of the argument nodeExpression leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
NVD description
A vulnerability was found in aizuda snail-job 1.4.0. It has been classified as critical. Affected is the function getRuntime of the file /snail-job/workflow/check-node-expression of the component Workflow-Task Management Module. The manipulation of the argument nodeExpression leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Autres vulnérabilités de com.aizuda:snail-job
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free