CVE-2019-10086

CVE-2019-10086: vulnerability in Apache Commons Beanutils

Published · Updated

Follow this CVE+ Monitor Apache Commons BeanUtils+ Monitor commons-beanutils

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 29%
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
Affected products
Apache · Apache Commons Beanutils