Jython Project Jython
2 CVEs affecting Jython Project Jython. Latest disclosed: 2017-07-06. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-4000 | Critical | 9.8 | 2017-07-06 | Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object. |
CVE-2013-2027 | | 2015-02-13 | Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspeci… |