PT-2023-26743 · Oscore · Oscore

Name of the Vulnerable Software and Affected Versions: oscore versions 2.2.6 and below Description: The issue is related to a code injection vulnerability in the component com.opensymphony.util.EJBUtils.createStateless. This vulnerability can be exploited by passing an unchecked argument to the...