{"id":"CVE-2020-11975","published":"2020-06-05T14:10:57Z","modified":"2024-08-04T11:48:57Z","title":"Apache Unomi allows conditions to use OGNL scripting which offers the possibility to call static Java classes from the…","vendor":null,"product":null,"tier":"core","eol":null,"affectedVersions":[{"vendor":"n/a","product":"Apache Unomi","versions":["Apache Unomi 1.0.0 to 1.5.0"]}],"description":{"text":"Apache Unomi allows conditions to use OGNL scripting which offers the possibility to call static Java classes from the JDK that could execute code with the permission level of the running Java process.","provenance":"source","from":"CVE.org"},"summary":null,"cvss":null,"epss":{"score":0.3061,"percentile":0.98235,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2021-04-12","exploitedFirstSeen":"2021-04-12","ransomware":false,"evidence":[{"url":"https://unit42.paloaltonetworks.com/network-attack-trends-winter-2020/","date":"2021-04-12"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"http://unomi.apache.org/security/cve-2020-11975.txt","tags":["x_refsource_MISC"]},{"url":"https://lists.apache.org/thread.html/r01021bc4b25c1e98812efca0b07f0e078a6281bd52f7c3817a429d95%40%3Ccommits.unomi.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/r79672c25e0ef9bb4b9148376281200a8e61c6d5ef5bb705e9a363460%40%3Ccommits.unomi.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"Maven","package":"org.apache.unomi:unomi","vulnerableRanges":["<1.5.4"],"patched":["1.5.4"],"from":["GHSA-v6fq-q792-j46j"],"provenance":"source"}],"advisories":[{"id":"GHSA-v6fq-q792-j46j","url":"https://github.com/advisories/GHSA-v6fq-q792-j46j","severity":"HIGH","ecosystem":"Maven","package":"org.apache.unomi:unomi","vulnerableRanges":["<1.5.4"],"patched":["1.5.4"],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2022-1189","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-1189","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2020-11-24","earliestUrl":"https://github.com/1135/unomi_exploit","repos":[{"name":"1135/unomi_exploit","url":"https://github.com/1135/unomi_exploit","stars":6,"created":"2020-11-24"}]},"nuclei":[{"id":"CVE-2020-11975","name":"Apache Unomi - Remote Code Execution","severity":"critical","path":"http/cves/2020/CVE-2020-11975.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11975.yaml"}],"first":{"date":"2020-11-24","source":"PoC-in-GitHub","url":"https://github.com/1135/unomi_exploit"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2020-06-05","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2020-11975","provenance":"source"},{"date":"2020-11-24","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/1135/unomi_exploit","provenance":"source"},{"date":"2021-04-12","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://unit42.paloaltonetworks.com/network-attack-trends-winter-2020/","provenance":"source"}],"speed":{"daysToPublicExploit":172,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":59.6,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 2026 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.65,"detail":"percentile 0.9823"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 PoC-in-GitHub repo; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"packageHistory":[{"cve":"CVE-2020-13942","published":"2020-11-24","fixed":"1.5.2","kev":false},{"cve":"CVE-2020-11975","published":"2020-06-05","fixed":"1.5.4","kev":false},{"cve":"CVE-2021-31164","published":"2021-05-04","fixed":"1.5.5","kev":false,"link":{"from":"CVE-2020-11975","to":"CVE-2021-31164","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.unomi:unomi","fromFixed":"1.5.4","toFixed":"1.5.5","daysApart":333}]}}],"package":"Maven:org.apache.unomi:unomi"}}