me.wuwenbin:template-utils-json (>=1.2.0.release, <=1.3.0.release), org.jodd:jodd-all (3.8.5) potentially affected by CVE-2018-21234 via org.jodd:jodd-json (3.8.5)

org.jodd:jodd-json MAVEN version 3.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jodd:jodd-json and may be impacted: - me.wuwenbin:template-utils-json =1.2.0.release, =1.3.0.release - org.jodd:jodd-all 3.8.5 Source cves: CVE-2018-21234 Source...

com.intenthq.pucket:pucket-avro_2.10 (>=1.0.3, <=1.0.5), com.intenthq.pucket:pucket-avro_2.11 (>=1.0.3, <=1.0.5) +8 more potentially affected by CVE-2018-21234 via org.jodd:jodd-json (3.6.6)

org.jodd:jodd-json MAVEN version 3.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jodd:jodd-json and may be impacted: - com.intenthq.pucket:pucket-avro2.10 =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.5...

com.wedeploy:com.wedeploy.api-java.api-client (1.0.0), com.wedeploy:com.wedeploy.common (>=1.0.0, <=1.0.1) +2 more potentially affected by CVE-2018-21234 via org.jodd:jodd-json (3.9.1)

org.jodd:jodd-json MAVEN version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jodd:jodd-json and may be impacted: - com.wedeploy:com.wedeploy.api-java.api-client 1.0.0 - com.wedeploy:com.wedeploy.common =1.0.0, =1.10.16.release,...

org.jodd:jodd-all (3.8.0) potentially affected by CVE-2018-21234 via org.jodd:jodd-json (3.8.0)

org.jodd:jodd-json MAVEN version 3.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jodd:jodd-json and may be impacted: - org.jodd:jodd-all 3.8.0 Source cves: CVE-2018-21234 Source advisory: OSV:GHSA-JRG3-QQ99-35G7...

CVE-2018-21234

creationtimestamp| type| source ---|---|--- 2020-05-22 02:55:30+00:00| seen| https://t.me/cibsecurity/12240...

CVE-2018-21234

Jodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set...

com.github.jherculesqz:core-fw (1.0), com.github.jherculesqz:core-fw-spring (1.0) +21 more potentially affected by CVE-2018-21234 via org.jodd:jodd-json (>=3.6.6, <=5.0.3)

org.jodd:jodd-json MAVEN version =3.6.6, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =beta-20170331, =beta-20170331, =1.0.1 and more Source cves: CVE-2018-21234 Source advisory: MEND:CVE-2018-21234...

CVE-2018-21234

Jodd before 5.0.4 is affected by CVE-2018-21234: Deserialization of Untrusted JSON Data when setClassMetadataName is set. The issue stems from how the library handles deserialization, enabling potentially untrusted data to be deserialized. Impact is indicated as high (NVD CVSS v3.1 base score 9.8...