CVE-2016-4000

Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object...

CVE-2016-4000

Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object...

CVE-2016-4000

CVE-2016-4000 affects Oracle Enterprise Manager Base Platform (Jython) — a remote code execution via a crafted serialized PyFunction object. The GitHub advisory GHSA-6R7R-JJ8H-PQ6V corroborates deserialization of untrusted data in Jython and references the same CVE. Tenable Nessus entries (e.g., ...

CVE-2016-4000

Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object...

Remote Code Execution (RCE)

Jython is vulnerable to remote code execution RCE. A malicious user can send a serialized pyfunction object to the system that when deserialized causes arbitrary code to be executed...

PT-2016-3147

Name of the Vulnerable Software and Affected Versions Jython versions prior to 2.7.1rc1 Description The issue is related to the restoration of untrusted data in memory, which can be exploited by a remote attacker to execute arbitrary code using a specially crafted serialized PyFunction object. Th...