CyberRota Analysis
AI-GeneratedActiviti versions up to 7.1.0.M6 are vulnerable due to inadequate validation of hash-brace deferred expressions in process variables, allowing attackers to inject malicious expressions. This vulnerability can lead to unauthorized method invocation on application beans during the evaluation of mail task body fields, posing a significant risk to application integrity. Organizations using affected versions should prioritize remediation to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Activiti through 7.1.0.M6 fails to validate hash-brace deferred expressions in process variables, allowing attackers to bypass expression filtering. Attackers can inject expressions beginning with #{ that are stored and later evaluated in the full Spring context when a mail task uses variable-backed body fields, enabling method invocation on application beans.