Apache CarbonData 2.3.2 Index Server Java Deserialization

Apache CarbonData version 2.3.2 contains a Java deserialization vulnerability in the Distributed Index Server Hadoop IPC endpoint that may allow remote code execution when a suitable gadget class is available on the server classpath. !/usr/bin/env bash Apache CarbonData 2.3.2 Index Server Java...

org.apache.carbondata:carbondata-datamap-examples (>=1.4.0, <=1.6.1), org.apache.carbondata:carbondata-examples (>=2.0.0, <=2.2.0) +10 more potentially affected by CVE-2018-11802 via org.apache.solr:solr-core (6.3.0)

org.apache.solr:solr-core MAVEN version 6.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - org.apache.carbondata:carbondata-datamap-examples =1.4.0, =2.0.0, =1.6.0, =1.4.0, =2.0.0,...

org.apache.carbondata:carbondata-datamap-examples (>=1.4.0, <=1.6.1), org.apache.carbondata:carbondata-examples (>=2.0.0, <=2.2.0) +10 more potentially affected by CVE-2017-12629 via org.apache.solr:solr-core (6.3.0)

org.apache.solr:solr-core MAVEN version 6.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - org.apache.carbondata:carbondata-datamap-examples =1.4.0, =2.0.0, =1.6.0, =1.4.0, =2.0.0,...