Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
oscore v2.2.6 and below was discovered to contain a code injection vulnerability in the component com.opensymphony.util.EJBUtils.createStateless. This vulnerability is exploited via passing an unchecked argument.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ericsson OSCORE 代码注入漏洞
Vulnerability Description
Ericsson OSCORE是瑞典爱立信（Ericsson）公司的一种新的轻量级物联网安全协议。 Ericsson OSCORE v2.2.6及之前版本存在安全漏洞，该漏洞源于在组件com.opensymphony.util.EJBUtils.createStateless中存在代码注入漏洞。
CVSS Information
N/A
Vulnerability Type
N/A