Skip to content

Cx6a5f7948-7054 @ Maven-commons-collections:commons-collections-3.2.1 #93

@mridilla

Description

@mridilla

Vulnerable Package issue exists @ Maven-commons-collections:commons-collections-3.2.1 in branch master

An unsafe deserialization vulnerability in the Apache Commons Collections (ACC) versions through 3.2.1 and 4.0.0 might lead to code execution.

Namespace: mridilla
Repository: JavaVulnerableLab
Repository Url: https://github.com/mridilla/JavaVulnerableLab
CxAST-Project: mridilla/JavaVulnerableLab
CxAST platform scan: e1fc43b6-0e4d-4a93-8009-8fe24d4a9091
Branch: master
Application: JavaVulnerableLab
Severity: HIGH
State: NOT_IGNORED
Status: RECURRENT
CWE: CWE-502


Addition Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: HIGH
Availability impact: HIGH


References
Commit
Commit
Commit
Commit
Issue
Commit

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions