Nick Boldt created JBDS-3560: -------------------------------- Summary: Arbitrary remote code execution with InvokerTransformer (COLLECTIONS-580) Key: JBDS-3560 URL: https://issues.jboss.org/browse/JBDS-3560 Project: Developer Studio (JBoss Developer Studio) Issue Type: Bug Components: server, upstream Affects Versions: 9.0.0.GA, 8.1.0.GA, 10.0.0.Alpha1 Reporter: Nick Boldt Assignee: Max Rydahl Andersen This is a container issue to wrap & track https://issues.apache.org/jira/browse/COLLECTIONS-580 Problem is that JBDS 9 (and probably 8 and 10 too) include org.apache.commons.collections 3.2.0.v2013030210310, which is affected by COLLECTIONS-580 - Arbitrary remote code execution with InvokerTransformer -- This message was sent by Atlassian JIRA (v6.4.11#64026)