DerScanner
Home / Vulnerability Database / Kotlin : Deprecated class InvokerServlet
Kotlin

Kotlin : Deprecated class InvokerServlet

Classification

OWASP Top 10 2013
A9-Using Components with Known Vulnerabilities
OWASP Top 10 2017
A9-Using Components with Known Vulnerabilities
OWASP Top 10 2021
A6-Vulnerable and Outdated Components
OWASP ASVS
Malicious Code
PCI DSS 4.0
6.3
CWE
CWE-1035

Overview

The application uses the obsolete InvokerServlet class. It allows an attacker to run arbitrary class on the server.

References

  1. Class InvokerServlet - tomcat.apache.org
  2. Invoker Servlet - coderanch.com
  3. OWASP Top 10-2017 A9-Using Components with Known Vulnerabilities
  4. CWE-1035
MEDIUM

DerScanner Severity Score

Do you want to fix Kotlin : Deprecated class InvokerServlet in your application?

See also

Kotlin

Kotlin : Missing required cryptographic step

Kotlin

Kotlin : Logging into system output

Kotlin

Kotlin : Call of notify() in synchronized block