Description
In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization and thus allowing an attacker to execute arbitrary code via crafted serialized data.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2010-0860 Vulnerability (CVE-2010-0860)
WordPress Plugin Related YouTube Videos Cross-Site Request Forgery (1.9.8)
WordPress Plugin Request a Quote Cross-Site Scripting (2.0.0)
WordPress Plugin Fungif The Awesome GIFs Cross-Site Scripting (2.0)
Apache HTTP Server CVE-2012-0883 Vulnerability (CVE-2012-0883)