4 matches found
CVE-2016-2173
CVE-2016-2173 - Esecuzione Remota di Codice in Spring AMQP - Test App Descrizione La classe org.springframework.core.serializer.DefaultDeserializer non convalida l'oggetto deserializzato rispetto a una whitelist. Fornendo un oggetto serializzato appositamente creato come il gadget Commons...
GHSA-HRP3-8P5W-27GV Improper Input Validation in Spring AMQP
org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code...
The vulnerability of the org.springframework.core.serializer.DefaultDeserializer component in the Spring AMQP RabbitMQ messaging application, which allows an attacker to execute arbitrary code.
The vulnerability of the org.springframework.core.serializer.DefaultDeserializer component in the Spring AMQP RabbitMQ messaging application exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...