Vulnerabilities affecting this package (1)
| Vulnerability |
Summary |
Fixed by |
VCID-nur4-1g8a-57ew
Aliases:
CVE-2014-0114
GHSA-p66x-2cv9-qq3v
|
Improper Input Validation
Apache Commons BeanUtils does not suppress the class property, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via the class parameter, as demonstrated by the passing of this parameter to the getClass method of the `ActionForm` object in Struts
|
There are no reported fixed by versions.
|
Vulnerabilities fixed by this package (0)
| Vulnerability |
Summary |
Aliases |
|
This package is not known to fix vulnerabilities.
|