CVE Catalog

CVE-2016-4000

Critical
Published: Translated: NVD NIST

Summary

Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized system access and execution of malicious code, posing a serious security threat to the organization.

Recommendation

It is recommended to upgrade Jython to version 2.7.1rc1 or later to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS