A remote code vulnerability residing in the widely used Apache Commons library has put many Java-based applications at risk.

The ability to invoke methods on one Java object from objects residing in another JVM has been a standard Java feature since the JDK 1.1 release. The Remote Method Invocation (RMI) framework makes ...