CVE-2021-26558 Deserialization of Untrusted Data

2021-11-1109:35:09

CWE-502

apache

www.cve.org

0.008 Low

EPSS

Percentile

81.1%

JSON

Deserialization of Untrusted Data vulnerability of Apache ShardingSphere-UI allows an attacker to inject outer link resources. This issue affects Apache ShardingSphere-UI Apache ShardingSphere-UI version 4.1.1 and later versions; Apache ShardingSphere-UI versions prior to 5.0.0.

CNA Affected

[
  {
    "product": "Apache ShardingSphere-UI",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "changes": [
          {
            "at": "5.0.0",
            "status": "unaffected"
          }
        ],
        "lessThan": "Apache ShardingSphere-UI*",
        "status": "affected",
        "version": "4.1.1",
        "versionType": "custom"
      }
    ]
  }
]