CVE-2016-4000
Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object.
- Update to 2.5.3-1ubuntu0.1
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for jython in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object.
Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors.
Check your installed stack and versions against the current vulnerability feeds.