8 matches found
CVE-2025-47771
creationtimestamp| type| source ---|---|--- 2025-06-20 00:31:10+00:00| published-proof-of-concept| Telegram/S1Qn3Mgp8Fycfi30xksbWkIDSfEWmvKzQ9DV8ScyPxkMsw...
CVE-2025-47771
PowSyBl Power System Blocks is a framework to build power system oriented software. In versions 6.3.0 to 6.7.1, there is a deserialization issue in the read method of the SparseMatrix class that can lead to a wide range of privilege escalations depending on the circumstances. This method takes in...
com.farao-community.farao:csa-runner-api (>=1.2.1, <=2.6.1), com.farao-community.farao:csa-runner-app (>=0.0.1, <=2.6.1) +290 more potentially affected by CVE-2025-47771 via com.powsybl:powsybl-math (>=1.0.0, <=6.7.1)
com.powsybl:powsybl-math MAVEN version =1.0.0, =1.2.1, =0.0.1, =4.1.4, =3.9.3, =2.2.0, =3.7.1, =2.2.0-rc1, =3.0.0, =2.4.1, =3.9.0, =4.5.0, =3.3.3, =3.6.0, =1.0.0, =1.2.0 - com.farao-community.farao:farao-crac-file-gse 1.0.0 and more Source cves: CVE-2025-47771 Source advisory: MEND:CVE-2025-47771...
CVE-2025-47771 PowSyBl Core allows deserialization of untrusted SparseMatrix data
PowSyBl Power System Blocks is a framework to build power system oriented software. In versions 6.3.0 to 6.7.1, there is a deserialization issue in the read method of the SparseMatrix class that can lead to a wide range of privilege escalations depending on the circumstances. This method takes in...
CVE-2025-47771
PowSyBl Core versions 6.3.0–6.7.1 contain a deserialization issue in SparseMatrix.read(InputStream) that can lead to privilege escalations under various circumstances. The root cause is a vulnerability in how SparseMatrix is deserialized, enabling untrusted input to affect system state. A fix is ...
CVE-2025-47771 PowSyBl Core allows deserialization of untrusted SparseMatrix data
PowSyBl Power System Blocks is a framework to build power system oriented software. In versions 6.3.0 to 6.7.1, there is a deserialization issue in the read method of the SparseMatrix class that can lead to a wide range of privilege escalations depending on the circumstances. This method takes in...
CVE-2025-47771 PowSyBl Core allows deserialization of untrusted SparseMatrix data
PowSyBl Power System Blocks is a framework to build power system oriented software. In versions 6.3.0 to 6.7.1, there is a deserialization issue in the read method of the SparseMatrix class that can lead to a wide range of privilege escalations depending on the circumstances. This method takes in...
com.farao-community.farao:csa-runner-api (>=1.3.1, <=2.6.1), com.farao-community.farao:csa-runner-app (>=1.3.1, <=2.6.1) +173 more potentially affected by CVE-2025-47771 via com.powsybl:powsybl-math (>=6.3.0, <=6.7.1)
com.powsybl:powsybl-math MAVEN version =6.3.0, =1.3.1, =1.3.1, =1.18.0, =1.18.0, =1.4.0, =1.6.0, =1.12.0, =1.27.0, =1.27.0, =1.27.0, =1.27.0, =1.27.0, =1.24.0, =1.6.2, =1.13.0 and more Source cves: CVE-2025-47771 Source advisory: SNYK:JAVA-COMPOWSYBL-10442148...