CVSS 3.1 Score 5.3 of 10 (medium)


Published Dec 27, 2023
Updated: Mar 21, 2024


CVE-2023-51079 is a vulnerability that affects MVEL 2.5.0.Final. It is caused by a long execution time in the ParseTools.subCompileExpression method, which is a result of multiple Java class lookups. The vendor disputes the severity of this vulnerability, claiming that the only consequence would be an extremely long parsing time. The vulnerability has a base severity rating of MEDIUM, with a base score of 5.3 according to NVD@NIST. There are no privileges required for exploitation, and user interaction is not necessary. The attack vector is through the network, and it does not impact integrity or confidentiality. The exploitability score is 3.9 out of 10, indicating a moderate level of difficulty for attackers to exploit this vulnerability. The potential danger to organizations lies in the possibility of prolonged execution times and potential denial-of-service situations.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-51079 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options