18 matches found
Deserialization of Untrusted Data
Overview org.springframework.batch:spring-batch-core is a framework for writing offline and batch applications using Spring and Java. Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the deserialize function. An attacker can execute arbitrary code or...
7.3CVSS6.5AI score0.00352EPSS
SaveExploits0References2
20