{"action":"Upgrade org.apache-extras.beanshell:bsh to 2.0b6 or later.","affected":[{"fixed":"2.0b6","introduced":"0"}],"component":"org.apache-extras.beanshell:bsh","cve_ids":["CVE-2016-2510"],"ecosystem":"Maven","epss":0.70425,"exploited":false,"fixed_versions":["2.0b6"],"ghsa_id":"GHSA-gxg6-rc6c-v673","id":"tcs_01M5N8Z924RD74ERMFCMSX00FY","modified_at":"2023-11-08T03:58:24.404260Z","published_at":"2022-05-13T01:14:25Z","references":["https://osv.dev/vulnerability/GHSA-gxg6-rc6c-v673","https://nvd.nist.gov/vuln/detail/CVE-2016-2510","https://github.com/frohoff/ysoserial/pull/13","https://github.com/beanshell/beanshell/commit/1ccc66bb693d4e46a34a904db8eeff07808d2ced","https://github.com/beanshell/beanshell/commit/7c68fde2d6fc65e362f20863d868c112a90a9b49","https://access.redhat.com/errata/RHSA-2016:1135","https://access.redhat.com/errata/RHSA-2016:1376","https://access.redhat.com/errata/RHSA-2019:1545","https://github.com/beanshell/beanshell/releases/tag/2.0b6","https://security.gentoo.org/glsa/201607-17","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.rsaconference.com/writable/presentations/file_upload/asd-f03-serial-killer-silently-pwning-your-java-endpoints.pdf","http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00056.html","http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00078.html","http://rhn.redhat.com/errata/RHSA-2016-0539.html","http://rhn.redhat.com/errata/RHSA-2016-0540.html","http://rhn.redhat.com/errata/RHSA-2016-2035.html","http://www.debian.org/security/2016/dsa-3504","http://www.ubuntu.com/usn/USN-2923-1"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-gxg6-rc6c-v673","url":"https://osv.dev/vulnerability/GHSA-gxg6-rc6c-v673"}],"summary":"Improper Input Validation in BeanShell"}