CVE-2014-9515

Dozer improperly uses a reflection-based approach to type conversion, which might allow remote attackers to execute arbitrary code via a crafted serialized object...

cn.123tool.chen:commons (1.0.0), cn.acooly:acooly-auth-google-authenticator (>=5.2.1, <=5.2.2) +690 more potentially affected by CVE-2014-9515 via net.sf.dozer:dozer (>=4.0, <=5.5.1)

net.sf.dozer:dozer MAVEN version =4.0, =5.2.1, =5.2.1, =5.2.1, =1.0.0, =2.1.0 and more Source cves: CVE-2014-9515 Source advisory: SNYK:JAVA-NETSFDOZER-15338467...