Critical severity9.8NVD Advisory· Published Jul 28, 2023· Updated Jun 17, 2026
CVE-2023-39022
CVE-2023-39022
Description
oscore v2.2.6 and below was discovered to contain a code injection vulnerability in the component com.opensymphony.util.EJBUtils.createStateless. This vulnerability is exploited via passing an unchecked argument.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
opensymphony:oscoreMaven | <= 2.2.6 | — |
Affected products
2- oscore/oscoredescription
Patches
Vulnerability mechanics
References
3- github.com/LetianYuan/My-CVE-Public-References/tree/main/opensymphony_oscorenvdExploitThird Party AdvisoryWEB
- github.com/advisories/GHSA-859m-2pfx-fwhfghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2023-39022ghsaADVISORY
News mentions
0No linked articles in our index yet.