cve.bz

CWE-917: Improper Neutralization of Special Elements used in an Expression Language Statement (Expression Language Injection), page 5

Filter

The product constructs all or part of an expression language (EL) statement in a framework such as a Java Server Page (JSP) using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended EL statement before it is executed.

What the weakness is: CWE-917 at MITRE. OWASP Top 10: A05:2025 Injection

Ask an AI about CWE-917

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-917: Improper Neutralization of Special Elements used in an Expression Language Statement and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/917.html and https://cve.bz/cve/cwe/917?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2019-5343EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  2. 8.8CVE-2019-5342EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  3. 8.8CVE-2019-11948EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  4. 8.8CVE-2019-11943EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  5. 8.8CVE-2019-11942EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  6. 6.5CVE-2019-11628EPSS 1.0%

    An issue was discovered in QlikView Server before 11.20 SR19, 12.00 and 12.10 before 12.10 SR11, 12.20 before SR9, and 12.30 before SR2; and Qlik Sense Enterprise and Qlik Analytics Platform installations that lack these patch levels: Febr…

  7. 7.2CVE-2019-9041ExploitEPSS 31%

    An issue was discovered in ZZZCMS zzzphp V1.6.1. In the inc/zzz_template.php file, the parserIfLabel() function's filtering is not strict, resulting in PHP code execution, as demonstrated by the if:assert substring.

  8. 9.8CVE-2019-5916EPSS 1.5%

    Input validation issue in POWER EGG(Ver 2.0.1, Ver 2.02 Patch 3 and earlier, Ver 2.1 Patch 4 and earlier, Ver 2.2 Patch 7 and earlier, Ver 2.3 Patch 9 and earlier, Ver 2.4 Patch 13 and earlier, Ver 2.5 Patch 12 and earlier, Ver 2.6 Patch 8…

  9. 9.8CVE-2019-7743EPSS 2.7%

    An issue was discovered in Joomla! before 3.9.3. The phar:// stream wrapper can be used for objection injection attacks because there is no protection mechanism (such as the TYPO3 PHAR stream wrapper) to prevent use of the phar:// handler …

  10. 7.2CVE-2018-16621EPSS 5.2%

    Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection.

  11. 9.8CVE-2018-12533EPSS 19%

    JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via a /DATA/ substring in a path with an org.richfaces.renderkit.html.Paint2DResourc…

  12. 9.8CVE-2018-12532EPSS 6.8%

    JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language (EL) variable mapper and execute arbitrary Java code via a MediaOutputResource's resource request, aka RF-14309.

  13. 8.8CVE-2010-1871KEVExploitEPSS 83%

    JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code…