EUVD-2019-11504

Malware in sbrugna...

CVE-2019-25057

In Corda before 4.1, the meaning of serialized data can be modified via an attacker-controlled CustomSerializer...

Insecure Serialization Data

corda-serialization is vulnerable to insecure serialization data. An attacker is able to use a CustomSerializer to modify the meaning of serialized data...

CVE-2019-25057

In Corda before 4.1, the meaning of serialized data can be modified via an attacker-controlled CustomSerializer...

Code injection

In Corda before 4.1, the meaning of serialized data can be modified via an attacker-controlled CustomSerializer...

CVE-2019-25057

In Corda before 4.1, the meaning of serialized data can be modified via an attacker-controlled CustomSerializer...

CVE-2019-25057

This CVE affects R3 Corda prior to version 4.1. The issue arises because the meaning of serialized data can be modified by an attacker-controlled CustomSerializer , enabling data manipulation at the serialization layer. The vulnerability pertains to the integrity of serialized data (per CVSS), wi...

PT-2022-8281

Name of the Vulnerable Software and Affected Versions Corda versions prior to 4.1 Description The issue allows an attacker to modify the meaning of serialized data using a CustomSerializer under their control. Recommendations For versions prior to 4.1, update to version 4.1 or later to resolve th...

CVE-2019-25057: Undefined Security Weakness

In Corda before 4.1, the meaning of serialized data can be modified via an attacker-controlled CustomSerializer...