4 matches found
CVE-2016-2173
CVE-2016-2173 - Exécution de code à distance dans Spring AMQP - Application de test Description La classe org.springframework.core.serializer.DefaultDeserializer ne valide pas l'objet désérialisé par rapport à une liste blanche. En fournissant un objet sérialisé malveillant tel que le gadget...
GHSA-HRP3-8P5W-27GV Improper Input Validation in Spring AMQP
org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code...
The vulnerability of the org.springframework.core.serializer.DefaultDeserializer component in the Spring AMQP RabbitMQ messaging application, which allows an attacker to execute arbitrary code.
The vulnerability of the org.springframework.core.serializer.DefaultDeserializer component in the Spring AMQP RabbitMQ messaging application exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...
