CVE-2022-41137

creationtimestamp| type| source ---|---|--- 2024-12-05 10:06:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113599657042916914 2024-12-05 12:50:46+00:00| seen| https://t.me/cvedetector/12076...

CVE-2022-41137

CVE-2022-41137 describes a vulnerability in Apache Hive Metastore (HMS) where the call to SerializationUtilities#deserializeObjectWithTypeInformation during filtering/fetching partitions is unsafe and can lead to remote code execution (RCE) via deserializing arbitrary data. The exploit requires a...