Oscore vulnerabilities

1 known vulnerability in Oscore from Oscore. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Oscore: Improper Control of Generation of Code

  CVE-2023-39022Jul 28, 2023OscoreEPSS 1.18%

  oscore v2.2.6 and below was discovered to contain a code injection vulnerability in the component com.opensymphony.util.EJBUtils.createStateless. This vulnerability is exploited via passing an unchecked argument.