| Package | Affected versions | Patched versions |
|---|---|---|
| commons-collections:commons-collections | < 3.2.2 | 3.2.2 |
| net.sourceforge.collections:collections-generic | ≤ 4.0.1 | |
| org.apache.commons:commons-collections4 | < 4.1 | 4.1 |
| org.apache.servicemix.bundles:org.apache.servicemix.bundles.collections-generic | ≤ 4.01 | |
| org.apache.servicemix.bundles:org.apache.servicemix.bundles.commons-collections | ≤ 3.2.1 | |
| commons collections | = 4.0≥ 3.0, < 3.2.2 | 3.2.2 |
Serialized-object interfaces in Java applications using the Apache Commons Collections (ACC) library may allow remote attackers to execute arbitrary commands via a crafted serialized Java object.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free