USN-8322-1: Apache Commons BeanUtils vulnerability
Source: Ubuntu
Published:
<p>Apache Commons BeanUtils could be made to run programs if it received specially crafted input.</p> <p>It was discovered that Apache Commons BeanUtils incorrectly allowed access to the declaredClass property of Java enum objects when handling externally supplied property paths. An attacker could p