Lucene search
+L

4 matches found

Veracode
Veracode
•added 2024/11/13 10:54 a.m.•28 views

Insecure Deserialization

Apache Lucene.Net.Replicator is vulnerable to Insecure Deserialization. The vulnerability exists due to the deserialization of untrusted data without adequate validation, allowing an attacker who intercepts traffic or controls the replication node URL to send a malicious JSON response...

8.1CVSS6.7AI score0.0119EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2024/10/31 9:57 a.m.•5 views

CVE-2024-43383

Deserialization of Untrusted Data vulnerability in Apache Lucene.Net.Replicator. This issue affects Apache Lucene.NET's Replicator library: from 4.8.0-beta00005 through 4.8.0-beta00016. An attacker that can intercept traffic between a replication client and server, or control the target replicati...

8.6CVSS0.0119EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2024/10/31 9:57 a.m.•34 views

CVE-2024-43383 Apache Lucene.Net.Replicator: Remote Code Execution in Lucene.Net.Replicator

Deserialization of Untrusted Data vulnerability in Apache Lucene.Net.Replicator. This issue affects Apache Lucene.NET's Replicator library: from 4.8.0-beta00005 through 4.8.0-beta00016. An attacker that can intercept traffic between a replication client and server, or control the target replicati...

8CVSS7.8AI score0.0119EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/31 12:00 a.m.•7 views

CVE-2024-43383: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Apache Lucene.Net.Replicator. This issue affects Apache Lucene.NET's Replicator library: from 4.8.0-beta00005 through 4.8.0-beta00016. An attacker that can intercept traffic between a replication client and server, or control the target replicati...

8.1CVSS7.9AI score0.0119EPSS
SaveExploits0References1
Rows per page
Query Builder