4 matches found
CVE-2016-2173
CVE-2016-2173 - Remote Code Execution in Spring AMQP - App Test Description The class org.springframework.core.serializer.DefaultDeserializer does not validate the deserialized object against a whitelist. By supplying a crafted serialized object like Chris Frohoff's Commons Collection gadget,...
GHSA-HRP3-8P5W-27GV Improper Input Validation in Spring AMQP
org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code...
The vulnerability of the org.springframework.core.serializer.DefaultDeserializer component in the Spring AMQP RabbitMQ messaging application, which allows an attacker to execute arbitrary code.
The vulnerability of the org.springframework.core.serializer.DefaultDeserializer component in the Spring AMQP RabbitMQ messaging application exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...
