CVE-2017-3203

The Java implementations of AMF3 deserializers in Pivotal/Spring Spring-flex derive class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may b...

PT-2018-7248

Name of the Vulnerable Software and Affected Versions: GraniteDS version 3.1.1.GA Description: The Java implementation of GraniteDS has an issue where AMF3 deserializers derive class instances from java.io.Externalizable instead of following the AMF3 specification's recommendation of...