Title: Cx6a5f7948-7054 @ Maven-commons-collections:commons-collections-3.2.1 · Issue #93 · mridilla/JavaVulnerableLab · GitHub
Open Graph Title: Cx6a5f7948-7054 @ Maven-commons-collections:commons-collections-3.2.1 · Issue #93 · mridilla/JavaVulnerableLab
X Title: Cx6a5f7948-7054 @ Maven-commons-collections:commons-collections-3.2.1 · Issue #93 · mridilla/JavaVulnerableLab
Description: Vulnerable Package issue exists @ Maven-commons-collections:commons-collections-3.2.1 in branch master An unsafe deserialization vulnerability in the Apache Commons Collections (ACC) versions through 3.2.1 and 4.0.0 might lead to code ex...
Open Graph Description: Vulnerable Package issue exists @ Maven-commons-collections:commons-collections-3.2.1 in branch master An unsafe deserialization vulnerability in the Apache Commons Collections (ACC) versions throu...
X Description: Vulnerable Package issue exists @ Maven-commons-collections:commons-collections-3.2.1 in branch master An unsafe deserialization vulnerability in the Apache Commons Collections (ACC) versions throu...
Opengraph URL: https://github.com/mridilla/JavaVulnerableLab/issues/93
X: @github
Domain: github.com
{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Cx6a5f7948-7054 @ Maven-commons-collections:commons-collections-3.2.1","articleBody":"**Vulnerable Package** issue exists @ **Maven\\-commons\\-collections:commons\\-collections\\-3\\.2\\.1** in branch **master**\r\n\r\nAn unsafe deserialization vulnerability in the Apache Commons Collections (ACC) versions through 3.2.1 and 4.0.0 might lead to code execution.\r\n\r\n**Namespace:** mridilla\r\n**Repository:** JavaVulnerableLab\r\n**Repository Url:** https://github.com/mridilla/JavaVulnerableLab\r\n**CxAST\\-Project:** mridilla/JavaVulnerableLab\r\n**CxAST platform scan:** [e1fc43b6\\-0e4d\\-4a93\\-8009\\-8fe24d4a9091](https://ast.checkmarx.net/projects/188bd83b-3bc2-4f79-9ccc-90f764c20505/scans?id=e1fc43b6-0e4d-4a93-8009-8fe24d4a9091\u0026branch=master)\r\n**Branch:** master\r\n**Application:** JavaVulnerableLab\r\n**Severity:** HIGH\r\n**State:** NOT_IGNORED\r\n**Status:** RECURRENT\r\n**CWE:** CWE-502\r\n\r\n\r\n----\r\n**Addition Info**\r\n**Attack vector:** NETWORK\r\n**Attack complexity:** LOW\r\n**Confidentiality impact:** HIGH\r\n**Availability impact:** HIGH\r\n\r\n\r\n----\r\n**References**\r\n[Commit](https://github.com/apache/commons-collections/commit/e585cd0433ae4cfbc56e58572b9869bd0c86b611)\r\n[Commit](https://github.com/apache/commons-collections/commit/3eee44cf63b1ebb0da6925e98b3dcc6ef1e4d610)\r\n[Commit](https://github.com/apache/commons-collections/commit/78d47d4d098ab814a7a00a0b1c81646b27f050cf)\r\n[Commit](https://github.com/apache/commons-collections/commit/b2b8f4adc557e4ef1ee2fe5e0ab46866c06ec55b)\r\n[Issue](https://issues.apache.org/jira/browse/COLLECTIONS-580)\r\n[Commit](https://github.com/apache/commons-collections/commit/d9a00134f16d685bea11b2b12de824845e6473e3)\r\n","author":{"url":"https://github.com/mridilla","@type":"Person","name":"mridilla"},"datePublished":"2022-07-01T14:26:22.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/93/JavaVulnerableLab/issues/93"}
| route-pattern | /_view_fragments/issues/show/:user_id/:repository/:id/issue_layout(.:format) |
| route-controller | voltron_issues_fragments |
| route-action | issue_layout |
| fetch-nonce | v2:3a6e02a1-8f0c-c38a-5f11-20d210b90ea8 |
| current-catalog-service-hash | 81bb79d38c15960b92d99bca9288a9108c7a47b18f2423d0f6438c5b7bcd2114 |
| request-id | B034:24A924:123742:181181:6A5B1589 |
| html-safe-nonce | 2838edadff917f41f64c3c0499433c9bd5c84691fe321643b4707f59cd0552c2 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJCMDM0OjI0QTkyNDoxMjM3NDI6MTgxMTgxOjZBNUIxNTg5IiwidmlzaXRvcl9pZCI6IjM0MTk5MTYzMzQ1NDkxMTIyMDEiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | 512af6d2edab727dc738f42a4bed0a955fc59b60d315c7a619b8e87180b11f09 |
| hovercard-subject-tag | issue:1291481834 |
| github-keyboard-shortcuts | repository,issues,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/issues/show/mridilla/JavaVulnerableLab/93/issue_layout |
| twitter:image | https://opengraph.githubassets.com/36b683b4bae59e6f3b3ced733730899c208185a666cdded287d4c1d092e26e42/mridilla/JavaVulnerableLab/issues/93 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/36b683b4bae59e6f3b3ced733730899c208185a666cdded287d4c1d092e26e42/mridilla/JavaVulnerableLab/issues/93 |
| og:image:alt | Vulnerable Package issue exists @ Maven-commons-collections:commons-collections-3.2.1 in branch master An unsafe deserialization vulnerability in the Apache Commons Collections (ACC) versions throu... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | mridilla |
| hostname | github.com |
| expected-hostname | github.com |
| None | 5290d7e14309ad1e76106a9c4237bd1041517e83ea182c8ab756752cb0c6940b |
| turbo-cache-control | no-preview |
| go-import | github.com/mridilla/JavaVulnerableLab git https://github.com/mridilla/JavaVulnerableLab.git |
| octolytics-dimension-user_id | 106341105 |
| octolytics-dimension-user_login | mridilla |
| octolytics-dimension-repository_id | 500864610 |
| octolytics-dimension-repository_nwo | mridilla/JavaVulnerableLab |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | true |
| octolytics-dimension-repository_parent_id | 301707927 |
| octolytics-dimension-repository_parent_nwo | cx-maty-siman/JavaVulnerableLab |
| octolytics-dimension-repository_network_root_id | 301707927 |
| octolytics-dimension-repository_network_root_nwo | cx-maty-siman/JavaVulnerableLab |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 9c975978430e9ad293956f2bbdaf153b1bd84a99 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width