TI-2019-07411 CVE-2019-10086 · GHSA-6phf-73q6-gh87
Deserialization of untrusted data in Apache Commons Beanutils
Priority MEDIUM 61
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects.