DerScanner
Home / Vulnerability Database / Java : Deprecated class InvokerServlet
Java

Java : Deprecated class InvokerServlet

Classification

OWASP Top 10 2013
A9-Using Components with Known Vulnerabilities
OWASP Top 10 2017
A9-Using Components with Known Vulnerabilities
OWASP Top 10 2021
A6-Vulnerable and Outdated Components
OWASP ASVS
Malicious Code
PCI DSS 4.0
6.3
CWE
CWE-1035

Overview

The application uses the obsolete InvokerServlet class. It allows an attacker to run arbitrary class on the server.

References

  1. Class InvokerServlet - tomcat.apache.org
  2. Invoker Servlet - coderanch.com
  3. OWASP Top 10-2017 A9-Using Components with Known Vulnerabilities
  4. CWE-1035
MEDIUM

DerScanner Severity Score

Do you want to fix Java : Deprecated class InvokerServlet in your application?

See also

Java

Java : Race condition

Java

Java : Text4Shell Vulnerability

Java

Java : JNI usage