Lucene search

K
cvelistSnykCVELIST:CVE-2022-25647
HistoryMay 01, 2022 - 12:00 a.m.

CVE-2022-25647 Deserialization of Untrusted Data

2022-05-0100:00:00
snyk
raw.githubusercontent.com
2

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.6%

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.