You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Path to dependency file: hadoop-crypto/crypto-keys/build.gradle
Path to vulnerable library: /tmp/ws-ua_20200729164840_WMHNNU/downloadResource_RHQTXV/20200729165124/bsh-1.3.0.jar,20200729164840_WMHNNU/downloadResource_RHQTXV/20200729165124/bsh-1.3.0.jar
BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Handler.
CVE-2016-2510 - High Severity Vulnerability
Vulnerable Library - bsh-1.3.0.jar
Lightweight Scripting for Java
Library home page: http://www.beanshell.org/
Path to dependency file: hadoop-crypto/crypto-keys/build.gradle
Path to vulnerable library: /tmp/ws-ua_20200729164840_WMHNNU/downloadResource_RHQTXV/20200729165124/bsh-1.3.0.jar,20200729164840_WMHNNU/downloadResource_RHQTXV/20200729165124/bsh-1.3.0.jar
Dependency Hierarchy:
Found in HEAD commit: c87ffc6b57551c0ce1c2ffa481dbff77be9b0e38
Vulnerability Details
BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Handler.
Publish Date: 2016-04-07
URL: CVE-2016-2510
CVSS 3 Score Details (8.1)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Origin: https://nvd.nist.gov/vuln/detail/CVE-2016-2510
Release Date: 2016-04-07
Fix Resolution: 2.0b6
⛑️ Automatic Remediation is available for this issue
The text was updated successfully, but these errors were encountered: