CVE-2017-15693

creationtimestamp| type| source ---|---|--- 2024-01-07 06:12:09+00:00| seen| https://t.me/arpsyndicate/2615...

CVE-2017-15693

Apache Geode prior to v1.4.0 stores objects in serialized form, and certain cluster operations and API invocations deserialize these objects. A user with DATA:WRITE access to the cluster may trigger remote code execution if certain classes are present on the classpath. The issue is rooted in unsa...