1 matches found
Deserialization Of Untrusted Data
org.hyperledger.fabric-sdk-java, fabric-sdk-java is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to Channel.java implementing readObject and exposing deSerializeChannel, which invoke ObjectInputStream.readObject on untrusted byte arrays without configuring an...
9.3CVSS6.2AI score0.0053EPSS
SaveExploits1References2Affected Software1
20