Code Injection

oscore is vulnerable to Code Injection. The vulnerability exists because the createStateless function of EJBUtils.java does not properly validate the arguments, allowing an attacker to inject and execute malicious code through an ldap lookup...