Lucene search

K
cvelistMitreCVELIST:CVE-2023-39022
HistoryJul 28, 2023 - 12:00 a.m.

CVE-2023-39022

2023-07-2800:00:00
mitre
www.cve.org
6
cve-2023-39022
code injection
oscore v2.2.6
opensymphony
ejbutils
vulnerability
component
unchecked argument

EPSS

0.003

Percentile

70.2%

oscore v2.2.6 and below was discovered to contain a code injection vulnerability in the component com.opensymphony.util.EJBUtils.createStateless. This vulnerability is exploited via passing an unchecked argument.

EPSS

0.003

Percentile

70.2%