com.github.hazendaz:displaytag (>=2.8.0, <=3.3.0), com.github.hazendaz:displaytag-examples (>=2.8.0, <=3.3.0) +8 more potentially affected by CVE-2025-48734 via org.apache.commons:commons-beanutils2 (2.0.0-m1)

org.apache.commons:commons-beanutils2 MAVEN version 2.0.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.commons:commons-beanutils2 and may be impacted: - com.github.hazendaz:displaytag =2.8.0, =2.8.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0,...

com.github.hazendaz:displaytag (>=2.8.0, <=3.3.0), com.github.hazendaz:displaytag-examples (>=2.8.0, <=3.3.0) +8 more potentially affected by CVE-2025-48734 via org.apache.commons:commons-beanutils2 (2.0.0-m1)

org.apache.commons:commons-beanutils2 MAVEN version 2.0.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.commons:commons-beanutils2 and may be impacted: - com.github.hazendaz:displaytag =2.8.0, =2.8.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0,...

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

Overview org.apache.commons:commons-beanutils2 is a package that provides an easy-to-use but flexible wrapper around reflection and introspection. Affected versions of this package are vulnerable to Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' via the getProper...

com.github.hazendaz:displaytag (>=2.8.0, <=3.3.0), com.github.hazendaz:displaytag-examples (>=2.8.0, <=3.3.0) +8 more potentially affected by CVE-2025-48734 via org.apache.commons:commons-beanutils2 (2.0.0-m1)

org.apache.commons:commons-beanutils2 MAVEN version 2.0.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.commons:commons-beanutils2 and may be impacted: - com.github.hazendaz:displaytag =2.8.0, =2.8.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0,...

com.github.hazendaz:displaytag (>=2.8.0, <=3.3.0), com.github.hazendaz:displaytag-examples (>=2.8.0, <=3.3.0) +8 more potentially affected by CVE-2025-48734 via org.apache.commons:commons-beanutils2 (2.0.0-m1)

org.apache.commons:commons-beanutils2 MAVEN version 2.0.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.commons:commons-beanutils2 and may be impacted: - com.github.hazendaz:displaytag =2.8.0, =2.8.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0,...

Authorization Bypass

commons-beanutils2 is vulnerable to authorization bypass. The vulnerability exists as the class property of Java objects are able to get access to the classloader by default...