DerScanner
Home / Vulnerability Database / Scala : Deprecated class InvokerServlet
Scala

Scala : Deprecated class InvokerServlet

Classification

OWASP Top 10 2013
A9-Using Components with Known Vulnerabilities
OWASP Top 10 2017
A9-Using Components with Known Vulnerabilities
OWASP Top 10 2021
A6-Vulnerable and Outdated Components
OWASP ASVS
Malicious Code
PCI DSS 4.0
6.3
CWE
CWE-1035

Overview

The application uses the obsolete InvokerServlet class. It allows an attacker to run arbitrary class on the server.

References

  1. Class InvokerServlet - tomcat.apache.org
  2. Invoker Servlet - coderanch.com
  3. OWASP Top 10-2017 A9-Using Components with Known Vulnerabilities
  4. CWE-1035
MEDIUM

DerScanner Severity Score

Do you want to fix Scala : Deprecated class InvokerServlet in your application?

See also

Scala

Scala : Unreleased resource stream

Scala

Scala : Multiple loggers in same class

Scala

Scala : Insufficient encryption key length