Summary
Ein Angreifer kann mehrere Schwachstellen in Apache Commons BCEL ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, und um Daten zu manipulieren.
Product
Apache Commons ist ein Apache-Projekt, das alle Aspekte der wiederverwendbaren Java-Komponenten behandelt.
Vulnerabilities 2
-
Medium 5.9
Apache Commons BCEL: Class repositories cache class files under their self-declared names, enabling cache poisoning
Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issu…
-
Medium 4.7
Apache Commons BCEL: Class2HTML emits unescaped class strings, enabling stored XSS
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Commons BCEL. This only happens when you're using Class2HTML to generate webpages for possibly-attacker-controlled class files, where Class2HTML emitt…
Revision history
-
#4
Neue Updates von SUSE aufgenommen
-
#3
Neue Updates von openSUSE aufgenommen
-
#2
Neue Updates von openSUSE aufgenommen
-
#1
Initiale Fassung
References
-
OSS Security Mailing List vom 2026-10-06
https://seclists.org/oss-sec/2026/q4/71
-
OSS Security Mailing List vom 2026-10-06
https://seclists.org/oss-sec/2026/q4/72
-
EU Vulnerability Database vom 2026-10-06
https://euvd.enisa.europa.eu/enisa/EUVD-2026-93970
-
EU Vulnerability Database vom 2026-10-06
https://euvd.enisa.europa.eu/enisa/EUVD-2026-93972
-
openSUSE Security Update OPENSUSE-SU-2026:22109-1 vom 2026-10-18
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W3G3NP3QX77Z7NZK6Q6PWML74QCPDL6K/
-
openSUSE Security Update OPENSUSE-SU-2026:12080-1 vom 2026-10-20
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Z5XDTMB4TRZQJAZWFVF3T3UDKNYW7FQ5/
-
SUSE Security Update SUSE-SU-2026:5199-1 vom 2026-11-11
https://lists.suse.com/pipermail/sle-security-updates/2026-November/030622.html