CVE-2025-66214

CVE-2025-66214 describes a Java deserialization vulnerability in Ladybug before version 3.0-20251107.114628. The affected component exposes the API endpoints /iaf/ladybug/api/report/{storage} and /iaf/ladybug/api/report/upload, which accept gzip-compressed XML files with user-controllable content...