{"id":30899,"date":"2021-02-24T16:24:30","date_gmt":"2021-02-24T16:24:30","guid":{"rendered":"https:\/\/merikebi.warrenmyers.com\/?p=30899"},"modified":"2021-02-24T16:24:30","modified_gmt":"2021-02-24T16:24:30","slug":"opennms-group-recently-learned-about-and-fixed-a-security-vulnerability-that-allowed-local-and-remote-code-execution-as-an-authenticated-user-via-a-custom-targeted-jexl-expression-thank-yo","status":"publish","type":"post","link":"https:\/\/merikebi.warrenmyers.com\/?p=30899","title":{"rendered":"\u201cOpenNMS Group recently learned about and fixed a security vulnerability that allowed local and remote code execution as an authenticated user via a custom, targeted #JEXL expression. Thank you to Artem Smotrakov for notifying us of this issue.\u201d https:\/\/t.co\/3UwbAiOrFZ https:\/\/t.co\/rkYdw8PtRY"},"content":{"rendered":"<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">\u201cOpenNMS Group recently learned about and fixed a security vulnerability that allowed local and remote code execution as an authenticated user via a custom, targeted <a href=\"https:\/\/twitter.com\/hashtag\/JEXL?src=hash&amp;ref_src=twsrc%5Etfw\">#JEXL<\/a> expression.<\/p>\n<p>Thank you to Artem Smotrakov for notifying us of this issue.\u201d <a href=\"https:\/\/t.co\/3UwbAiOrFZ\">https:\/\/t.co\/3UwbAiOrFZ<\/a> <a href=\"https:\/\/t.co\/rkYdw8PtRY\">pic.twitter.com\/rkYdw8PtRY<\/a><\/p>\n<p>&mdash; Warren Myers \ud83d\udc27\ud83d\udc3f (@warrenmyers) <a href=\"https:\/\/twitter.com\/warrenmyers\/status\/1364611807084740613?ref_src=twsrc%5Etfw\">February 24, 2021<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/>\nfrom Twitter https:\/\/twitter.com\/warrenmyers<\/p>\n<p>February 24, 2021 at 11:23AM<br \/>\nvia <a href=\"https:\/\/ifttt.com\/?ref=da&#038;site=wordpress\">IFTTT<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u201cOpenNMS Group recently learned about and fixed a security vulnerability that allowed local and remote code execution as an authenticated user via a custom, targeted #JEXL expression. Thank you to Artem Smotrakov for notifying us of this issue.\u201d https:\/\/t.co\/3UwbAiOrFZ pic.twitter.com\/rkYdw8PtRY &mdash; Warren Myers \ud83d\udc27\ud83d\udc3f (@warrenmyers) February 24, 2021 from Twitter https:\/\/twitter.com\/warrenmyers February 24, 2021 at &hellip;<br \/><a href=\"https:\/\/merikebi.warrenmyers.com\/?p=30899\" class=\"more-link pen_button pen_element_default pen_icon_arrow_double\">Continue reading <span class=\"screen-reader-text\">\u201cOpenNMS Group recently learned about and fixed a security vulnerability that allowed local and remote code execution as an authenticated user via a custom, targeted #JEXL expression. Thank you to Artem Smotrakov for notifying us of this issue.\u201d https:\/\/t.co\/3UwbAiOrFZ https:\/\/t.co\/rkYdw8PtRY<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[4],"tags":[792],"keyring_services":[],"class_list":["post-30899","post","type-post","status-publish","format-standard","hentry","category-blih","tag-twitter"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/posts\/30899","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=30899"}],"version-history":[{"count":1,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/posts\/30899\/revisions"}],"predecessor-version":[{"id":30900,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/posts\/30899\/revisions\/30900"}],"wp:attachment":[{"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=30899"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=30899"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=30899"},{"taxonomy":"keyring_services","embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fkeyring_services&post=30899"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}