Lucene search

Spring-Kafka has Java Deserialization vulnerability When Improperly Configured

🗓️ 24 Aug 2023 15:10:31Reported by GoogleType

osv🔗 osv.dev👁 55 Views

Spring-Kafka Deserialization Vulnerability Risk in Improper Configuratio

Reporter	Title	Published	Views	Family All 17
CVE	CVE-2023-34040	24 Aug 202313:15	–	cve
GithubExploit	Exploit for Deserialization of Untrusted Data in Vmware Spring For Apache Kafka	24 Apr 202403:54	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Vmware Spring For Apache Kafka	28 Sep 202311:18	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Vmware Spring For Apache Kafka	30 Aug 202312:09	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Vmware Spring For Apache Kafka	27 May 202415:57	–	githubexploit
Prion	Deserialization of untrusted data	24 Aug 202313:15	–	prion
OSV	CVE-2023-34040	24 Aug 202313:15	–	osv
IBM Security Bulletins	Security Bulletin: VMware Tanzu Spring for Apache Kafka is vulnerable to CVE-2023-34040 used in IBM Maximo Application Suite - Monitor Component	26 Sep 202318:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	17 Oct 202400:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	30 Jan 202404:12	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-34040
github	www.github.com/spring-projects/spring-kafka/commit/25ac793a78725e2ca4a3a2888a1506a4bfcf0c9d
github	www.github.com/spring-projects/spring-kafka/commit/eb779679812f61a8553ced3d0e4069dca65560ed
github	www.github.com/spring-projects/spring-kafka
spring	www.spring.io/security/cve-2023-34040

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Aug 2023 15:31Current

6.7Medium risk

Vulners AI Score6.7

CVSS35.3 - 7.8

EPSS0.1006

SSVC