TI-2025-30956 CVE-2025-48734 · GHSA-wxr5-93ph-8wr9
Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default
Priority HIGH 73
Improper Access Control vulnerability in Apache Commons.
RHSA-2025:9318
javapackages-tools:201801 security update
Released 2025-06-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux CRB (v. 8) ant-1.10.5-1.module+el8.10.0+23274+27840b45.noarch::javapackages-tools:201801, ant-1.10.5-1.module+el8.10.0+23274+27840b45.src::javapackages-tools:201801, ant-antlr-1.10.5-1.module+el8.10.0+23274+27840b45.noarch::javapackages-tools:201801 +47
Fixes 2 records
TI-2019-07411 CVE-2019-10086 · GHSA-6phf-73q6-gh87
Deserialization of untrusted data in Apache Commons Beanutils
Priority MEDIUM 61
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects.