Skip to content
OpenAdvisories

Package · Debian

openjpa

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    CVE-2013-1768

    Deserialization of Untrusted Data in Apache OpenJPA

    The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attac…

    org.apache.openjpa:openjpa openjpa Debian Maven