{"action":"Upgrade org.apache.commons:commons-beanutils2 to 2.0.0-M2 or later.","affected":[{"fixed":"2.0.0-M2","introduced":"2.0.0-M1"}],"component":"org.apache.commons:commons-beanutils2","cve_ids":["CVE-2025-48734"],"ecosystem":"Maven","epss":0.02018,"exploited":false,"fixed_versions":["2.0.0-M2"],"ghsa_id":"GHSA-wxr5-93ph-8wr9","id":"tcs_01M5N9HE8T6TNWC2CK1V2AA21R","modified_at":"2026-09-10T03:50:24.755642299Z","published_at":"2025-05-28T15:34:34Z","references":["https://osv.dev/vulnerability/GHSA-wxr5-93ph-8wr9","https://nvd.nist.gov/vuln/detail/CVE-2025-48734","https://github.com/apache/commons-beanutils/commit/bd20740da25b69552ddef8523beec0837297eaf9","https://github.com/apache/commons-beanutils","https://lists.apache.org/thread/s0hb3jkfj5f3ryx6c57zqtfohb0of1g9","https://lists.debian.org/debian-lts-announce/2025/06/msg00027.html","http://www.openwall.com/lists/oss-security/2025/05/28/6"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-wxr5-93ph-8wr9#Maven/org.apache.commons:commons-beanutils2","url":"https://osv.dev/vulnerability/GHSA-wxr5-93ph-8wr9"}],"summary":"Apache Commons Improper Access Control vulnerability"}