diff --git a/CVE-2015-6420/README.md b/CVE-2015-6420/README.md index 54cb118..acfc548 100644 --- a/CVE-2015-6420/README.md +++ b/CVE-2015-6420/README.md @@ -5,7 +5,7 @@ The payload and test used is based on The actual test is identical to the test used to verify CVE-2015-7501 . - +Requires JDK 8. Succeeds (indicating vulnerability) at `3.2.1`; fails (indicating no vulnerability) at `3.2.2`. diff --git a/CVE-2015-6420/pov-project.json b/CVE-2015-6420/pov-project.json new file mode 100644 index 0000000..708589e --- /dev/null +++ b/CVE-2015-6420/pov-project.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2015-6420", + "artifact": "commons-collections:commons-collections", + "vulnerableVersions": [ + "1.0", + "2.0", + "2.0.20020914.015953", + "2.0.20020914.020746", + "2.0.20020914.020858", + "2.1", + "2.1.1", + "3.0", + "3.0-dev2", + "3.1", + "3.2", + "3.2.1" + ], + "fixVersion": "3.2.2", + "jdkVersion": "8", + "testSignalWhenVulnerable": "success", + "references": [ + "https://nvd.nist.gov/vuln/detail/CVE-2015-6420", + "https://github.com/advisories/GHSA-6hgm-866r-3cjv" + ] +}