CVE-2016-2510
1 advisory.
Maven/org.apache-extras.beanshell:bsh CVE-2016-2510: high 8.1
Improper Input Validation in BeanShell
Action: Upgrade org.apache-extras.beanshell:bsh to 2.0b6 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0b6 | - |
Fixed versions
| 2.0b6 |
Sources
- osv: GHSA-gxg6-rc6c-v673
- https://nvd.nist.gov/vuln/detail/CVE-2016-2510
- https://github.com/frohoff/ysoserial/pull/13
- https://github.com/beanshell/beanshell/commit/1ccc66bb693d4e46a34a904db8eeff07808d2ced
- https://github.com/beanshell/beanshell/commit/7c68fde2d6fc65e362f20863d868c112a90a9b49
- https://access.redhat.com/errata/RHSA-2016:1135
- https://access.redhat.com/errata/RHSA-2016:1376
- https://access.redhat.com/errata/RHSA-2019:1545
- https://github.com/beanshell/beanshell/releases/tag/2.0b6
- https://security.gentoo.org/glsa/201607-17
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://www.rsaconference.com/writable/presentations/file_upload/asd-f03-serial-killer-silently-pwning-your-java-endpoints.pdf
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00056.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00078.html
- http://rhn.redhat.com/errata/RHSA-2016-0539.html
- http://rhn.redhat.com/errata/RHSA-2016-0540.html
- http://rhn.redhat.com/errata/RHSA-2016-2035.html
- http://www.debian.org/security/2016/dsa-3504
- http://www.ubuntu.com/usn/USN-2923-1
CVE-2016-2510 · published · modified · JSON