GHSA-fjq5-5j5f-mvxh

• CVE-2015-7501

• 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

{
    "github_reviewed_at": "2022-11-03T22:57:31Z",
    "cwe_ids": [
        "CWE-502"
    ],
    "nvd_published_at": "2017-11-09T17:29:00Z",
    "github_reviewed": true,
    "severity": "CRITICAL"
}

• https://nvd.nist.gov/vuln/detail/CVE-2015-7501
• https://access.redhat.com/security/vulnerabilities/2059393
• https://access.redhat.com/solutions/2045023
• https://arxiv.org/pdf/2306.05534.pdf
• https://bugzilla.redhat.com/show_bug.cgi?id=1279330
• https://commons.apache.org/proper/commons-collections/release_4_1.html
• https://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability
• https://github.com/apache/commons-collections
• https://github.com/jensdietrich/xshady-release/tree/main/CVE-2015-7501
• https://issues.apache.org/jira/browse/COLLECTIONS-580.
• https://sourceforge.net/p/collections/code/HEAD/tree
• http://rhn.redhat.com/errata/RHSA-2016-1773.html