A long execution time can occur in the ParseTools.subCompileExpression method in MVEL 2.5.0.Final because of many Java class lookups. NOTE: the vendor disputes this because the only thing that you could expect is that the parser will take a crazy amount of time to complete its task.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mvel | Mvel | 2.5.0 (including) | 2.5.0 (including) |
| Red Hat build of Apache Camel 4.4.1 for Spring Boot 3.2 | RedHat | mvel | * |
| Mvel | Ubuntu | bionic | * |
| Mvel | Ubuntu | lunar | * |
| Mvel | Ubuntu | mantic | * |
| Mvel | Ubuntu | trusty | * |
| Mvel | Ubuntu | xenial | * |