Skip to content
OpenAdvisories

Package · Maven

opensymphony:oscore

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2023-39022

    Code injection in oscore

    oscore v2.2.6 and below was discovered to contain a code injection vulnerability in the component com.opensymphony.util.EJBUtils.createStateless. This vulnerability is exploited via passing an unchecked argument.

    opensymphony:oscore Maven