6.3

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-14674

CVE-2025-14674: snail-job is vulnerable to Code Injection through QLExpressEngine.doEval function

A vulnerability was found in aizuda snail-job up to 1.6.0. Affected by this vulnerability is the function QLExpressEngine.doEval of the file snail-job-common/snail-job-common-core/src/main/java/com/aizuda/snailjob/common/core/expression/strategy/QLExpressEngine.java. The manipulation results in injection. The attack can be launched remotely. Upgrading to version 1.7.0-beta1 addresses this issue. The patch is identified as 978f316c38b3d68bb74d2489b5e5f721f6675e86. The affected component should be upgraded.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-14674

CVE-2025-14674:

6.3

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
com.aizuda:snail-job	maven	< 1.7.0-beta1	1.7.0-beta1

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in the QLExpressEngine.doEval function, which evaluates QL expressions without proper sandboxing. The security patch 978f316c38b3d68bb74d2489b5e5f721f6675e86 confirms this by adding a mitigation directly to the QLExpressEngine class. The patch introduces a static initializer that calls QLExpressRunStrategy.addSecurityRiskMethod(InitialContext.class, "doLookup"). This action explicitly blocks the use of the doLookup method, which is a well-known vector for JNDI injection attacks. The vulnerability description and the patch evidence clearly point to doEval as the function that processes the malicious input (the expression), making it the vulnerable function. An attacker could have previously passed a malicious expression to this function to trigger a JNDI lookup and achieve remote code execution.

Vulnerable functions

com.aizuda.snailjob.common.core.expression.strategy.QLExpressEngine.doEval

snail-job-common/snail-job-common-core/src/main/java/com/aizuda/snailjob/common/core/expression/strategy/QLExpressEngine.java

The `doEval` function is responsible for evaluating a QL expression. Before the patch, this function allowed the execution of expressions that could instantiate and use `javax.naming.InitialContext.doLookup`. This flaw could be exploited for JNDI injection attacks, allowing an attacker to execute arbitrary code remotely by providing a crafted expression.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.