8.1high
CVE-2016-2510in critical feed
Improper Input Validation in BeanShell
Also known as GHSA-gxg6-rc6c-v673
Published 10 y ago · modified 4 mo ago · JSON
CVSS
8.1
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
70.4%
percentile 99%
Public exploits
0
none known
Summary
BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Handler.
Exploit prediction (EPSS)
70.43% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.1 | 8.1 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P |
| GitHub | 3.1 | 8.1 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.apache-extras.beanshell:bsh | <2.0b6 | 2.0b6 |
Classification
References
- rhn.redhat.com /errata/RHSA-2016-2035.html · vendor-advisory, x_refsource_REDHAT, x_transferred
- securityfocus.com /bid/84139 · vdb-entry, x_refsource_BID, x_transferred
- access.redhat.com /errata/RHSA-2016:1135 · vendor-advisory, x_refsource_REDHAT, x_transferred
- rhn.redhat.com /errata/RHSA-2016-0540.html · vendor-advisory, x_refsource_REDHAT, x_transferred
- access.redhat.com /errata/RHSA-2016:1376 · vendor-advisory, x_refsource_REDHAT, x_transferred
- lists.opensuse.org /opensuse-security-announce/2016-03/msg00056.html · vendor-advisory, x_refsource_SUSE, x_transferred
- rhn.redhat.com /errata/RHSA-2016-0539.html · vendor-advisory, x_refsource_REDHAT, x_transferred
- debian.org /security/2016/dsa-3504 · vendor-advisory, x_refsource_DEBIAN, x_transferred
- securitytracker.com /id/1035440 · vdb-entry, x_refsource_SECTRACK, x_transferred
- lists.opensuse.org /opensuse-security-announce/2016-03/msg00078.html · vendor-advisory, x_refsource_SUSE, x_transferred
- ubuntu.com /usn/USN-2923-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
- security.gentoo.org /glsa/201607-17 · vendor-advisory, x_refsource_GENTOO, x_transferred
- access.redhat.com /errata/RHSA-2019:1545 · vendor-advisory, x_refsource_REDHAT, x_transferred
- oracle.com /security-alerts/cpuoct2020.html · x_refsource_MISC, x_transferred
- github.com /frohoff/ysoserial/pull/13 · x_refsource_MISC, x_transferred
- github.com /beanshell/beanshell/commit/7c68fde2d6fc65e362f20863d868c112a90a9b49 · x_refsource_CONFIRM, x_transferred
- github.com /beanshell/beanshell/commit/1ccc66bb693d4e46a34a904db8eeff07808d2ced · x_refsource_CONFIRM, x_transferred
- github.com /beanshell/beanshell/releases/tag/2.0b6 · x_refsource_CONFIRM, x_transferred
- rsaconference.com /writable/presentations/file_upload/asd-f03-serial-killer-silently-pwning-your-java-endpoi · x_refsource_MISC, x_transferred
- nvd.nist.gov /vuln/detail/CVE-2016-2510 · advisory
Sources
- CVE List: CVE-2016-2510
- GitHub Advisory: GHSA-gxg6-rc6c-v673
- NVD: CVE-2016-2510
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.