Search: CVE-2025-48734

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.8	EPSS 2.0%	CVE-2025-48734Apache Commons BeanUtils 1.x · Improper Access Control High8.8EPSS 2.0%2025-05-28CVE Database V5CVE-2025-48734 CVE-2025-48734 is a high-severity improper access control vulnerability in Apache Commons BeanUtils 1.x before version 1.11.0 and 2.x before 2.0.0-M2. It allows attackers to access the class loader of Java enum objects via the 'declaredClass' property when property paths from external sources are passed directly to PropertyUtilsBean.getProperty() or getNestedProperty(). This vulnerability can lead to arbitrary code execution. EPSS 2.0%Vulnerability Apache Software Foundation #cwe-284	CVE Database V5	2025-05-28

Page 1 of 1 · 2 duplicate CVE records merged