Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2025/02/14 3:31 p.m.19 views

Apache EventMesh: raft Hessian Deserialization Vulnerability allowing remote code execution

CWE-502 Deserialization of Untrusted Data at the eventmesh-meta-raft plugin module in Apache EventMesh master branch without release version on windows\linux\mac os e.g. platforms allows attackers to send controlled message and remote code execute via hessian deserialization rpc protocol. Users c...

9.8CVSS7.4AI score0.00751EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder