Vulnerable Library - commons-dbcp-1.4.jar
Path to dependency file: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/commons-pool/commons-pool/1.5.4/commons-pool-1.5.4.jar
Found in HEAD commit: 3fb13535ce3a5993f2bc2b02a3ece468e691a942
Vulnerabilities
| Vulnerability |
Severity |
 CVSS |
Dependency |
Type |
Fixed in (commons-dbcp version) |
Remediation Possible** |
Reachability |
| CVE-853521-722872 |
 Critical |
9.8 |
commons-pool-1.5.4.jar |
Transitive |
N/A* |
❌ |
|
*For some transitive vulnerabilities, there is no version of direct dependency with a fix. Check the "Details" section below to see if there is a version of transitive dependency where vulnerability is fixed.
**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation
Details
CVE-853521-722872
Vulnerable Library - commons-pool-1.5.4.jar
Commons Object Pooling Library
Library home page: http://www.apache.org/
Path to dependency file: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/commons-pool/commons-pool/1.5.4/commons-pool-1.5.4.jar
Dependency Hierarchy:
- commons-dbcp-1.4.jar (Root Library)
- ❌ commons-pool-1.5.4.jar (Vulnerable Library)
Found in HEAD commit: 3fb13535ce3a5993f2bc2b02a3ece468e691a942
Found in base branch: master
Vulnerability Details
Created automatically by the test suite
Publish Date: 2010-06-07
URL: CVE-853521-722872
CVSS 3 Score Details (9.8)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: High
- Availability Impact: High
For more information on CVSS3 Scores, click here.
Path to dependency file: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/commons-pool/commons-pool/1.5.4/commons-pool-1.5.4.jar
Found in HEAD commit: 3fb13535ce3a5993f2bc2b02a3ece468e691a942
Vulnerabilities
*For some transitive vulnerabilities, there is no version of direct dependency with a fix. Check the "Details" section below to see if there is a version of transitive dependency where vulnerability is fixed.
**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation
Details
Vulnerable Library - commons-pool-1.5.4.jar
Commons Object Pooling Library
Library home page: http://www.apache.org/
Path to dependency file: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/commons-pool/commons-pool/1.5.4/commons-pool-1.5.4.jar
Dependency Hierarchy:
Found in HEAD commit: 3fb13535ce3a5993f2bc2b02a3ece468e691a942
Found in base branch: master
Vulnerability Details
Created automatically by the test suite
Publish Date: 2010-06-07
URL: CVE-853521-722872
CVSS 3 Score Details (9.8)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: High
- Availability Impact: High
For more information on CVSS3 Scores, click here.