Description
Whilst presence of a commons-collections plays a role in enabling the RCE the CVE is for improper shielding of apache synapse, so it should not be reported for the commons-collections library.
The apache-commons CVE this relates to is likely CVE-2015-6420.
Appears to have been resolved in the meantime. Vulnerability URL now yields HTTP 404 and the improper CVE is no longer returned by the OSSIndex for commons-collections 3.2.2
Vulnerability URL
Component URL
Description Whilst presence of a commons-collections plays a role in enabling the RCE the CVE is for improper shielding of apache synapse, so it should not be reported for the commons-collections library. The apache-commons CVE this relates to is likely CVE-2015-6420.