Lucene search
+L

3 matches found

Prion
Prion
added 2023/07/25 3:15 p.m.37 views

Deserialization of untrusted data

Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute code via RMIVersions up to including 2.20.10 stable branch and 2.21.17 unstable branch use the component "commons-beanutils", which contains a class that can be used for remote...

7.5CVSS10AI score0.03239EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
added 2023/07/25 2:2 p.m.149 views

CVE-2023-37895

Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute code via RMIVersions up to including 2.20.10 stable branch and 2.21.17 unstable branch use the component "commons-beanutils", which contains a class that can be used for remote...

9.8CVSS10AI score0.03239EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2023/07/25 2:2 p.m.26 views

CVE-2023-37895 Apache Jackrabbit RMI access can lead to RCE

Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute code via RMIVersions up to including 2.20.10 stable branch and 2.21.17 unstable branch use the component "commons-beanutils", which contains a class that can be used for remote...

10AI score0.03239EPSS
SaveExploits0References4
Rows per page
Query Builder