Read the docs
Red Hat Security Advisory

RHSA-2011:1334

JBoss Enterprise SOA Platform 5.1.0 security update

Released 2011-09-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

Priority MEDIUM 41

Spring Framework 3.0.0 through 3.0.5, Spring Security 3.0.0 through 3.0.5 and 2.0.0 through 2.0.6, and possibly other versions deserialize objects from untrusted sources, which allows remote attackers to bypass intended…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.08601 Published 2011-10-04 Fixed in 3.0.6, 2.0.7 CWE-502