Apache Software Foundation Apache Commons Beanutils 2.X vulnerabilities

1 known vulnerability affecting apache_software_foundation/apache_commons_beanutils_2.x.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2025-48734HIGHCVSS 8.8≥ 2.0.0-M1, < 2.0.0-M22025-05-28

CVE-2025-48734 [HIGH] CWE-284 CVE-2025-48734: Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was add Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers from using the declared class property of Java enum objects to get access to the classloader. However this protection was not enabled by default. PropertyUtilsBean (and consequently BeanUtilsBean) n