youseries/uflo

Releases7

Frequency2 months 3 weeks

Last Release about 7 years ago

Stars572

UFLO是一款基于Spring的纯Java流程引擎，支持并行、动态并行、串行、会签等各种流转方式。

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-25894 ↗	Jan 26, 2023Thursday, 26 January 2023, 21:15	9.8 CRITICAL	—
All versions of the package com.bstek.uflo:uflo-core are vulnerable to Remote Code Execution (RCE) in the ExpressionContextImpl class via jexl.createExpression(expression).evaluate(context); functionality, due to improper user input validation.