| Package | Affected versions | Patched versions |
|---|---|---|
| opensymphony:oscore | ≤ 2.2.6 | |
| oscore | ≤ 2.2.6 |
oscore v2.2.6 and below was discovered to contain a code injection vulnerability in the component com.opensymphony.util.EJBUtils.createStateless. This vulnerability is exploited via passing an unchecked argument.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free