CVE-2013-1768

The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data…

published July 11, 2013

CVSS
—
EPSS
10%
Percentile
95.4
In the wild
Unconfirmed
What it is

The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by creating a serialized object and leveraging improperly secured server programs.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09511 · 95.4th percentile
Published
2013-07-11T22:00Z
EPSS history
Timeline
  • 11 JUL 22:00Z
    The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data…
    cvelistv5