Lucene search

K
broadcomBroadcom Security ResponseBSNSA22450
HistoryAug 29, 2023 - 12:00 a.m.

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization

2023-08-2900:00:00
Broadcom Security Response
support.broadcom.com
14

7.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.4%

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.

CPENameOperatorVersion
brocade sannavlt2.2.0
brocade sannavlt2.2.2a