Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2016-2510

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-gxg6-rc6c-v673

Improper Input Validation in BeanShell BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Handler.

gitlab/maven/org.apache-extras.beanshell/bsh/CVE-2016-2510

Code Injection BeanShell when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to `XThis.Handler`.