me.wuwenbin:template-utils-json (>=1.2.0.release, <=1.3.0.release), org.jodd:jodd-all (3.8.5) potentially affected by CVE-2018-21234 via org.jodd:jodd-json (3.8.5)

org.jodd:jodd-json MAVEN version 3.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jodd:jodd-json and may be impacted: - me.wuwenbin:template-utils-json =1.2.0.release, =1.3.0.release - org.jodd:jodd-all 3.8.5 Source cves: CVE-2018-21234 Source...

org.jodd:jodd-all (4.1.2), org.jodd:jodd-joy (4.1.2) +1 more potentially affected by CVE-2018-21234 via org.jodd:jodd-json (4.1.2)

org.jodd:jodd-json MAVEN version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jodd:jodd-json and may be impacted: - org.jodd:jodd-all 4.1.2 - org.jodd:jodd-joy 4.1.2 - org.jodd:jodd-madvoc 4.1.2 Source cves: CVE-2018-21234 Source advisory:...

com.wedeploy:com.wedeploy.api-java.api-client (1.0.0), com.wedeploy:com.wedeploy.common (>=1.0.0, <=1.0.1) +2 more potentially affected by CVE-2018-21234 via org.jodd:jodd-json (3.9.1)

org.jodd:jodd-json MAVEN version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jodd:jodd-json and may be impacted: - com.wedeploy:com.wedeploy.api-java.api-client 1.0.0 - com.wedeploy:com.wedeploy.common =1.0.0, =1.10.16.release,...

com.github.jherculesqz:core-fw (1.0), com.github.jherculesqz:core-fw-spring (1.0) +11 more potentially affected by CVE-2018-21234 via org.jodd:jodd-json (3.7)

org.jodd:jodd-json MAVEN version 3.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jodd:jodd-json and may be impacted: - com.github.jherculesqz:core-fw 1.0 - com.github.jherculesqz:core-fw-spring 1.0 - com.github.jherculesqz:core-fw-spring-securi...

org.jodd:jodd-joy (4.1.5), org.jodd:jodd-madvoc (4.1.5) potentially affected by CVE-2018-21234 via org.jodd:jodd-json (4.1.5)

org.jodd:jodd-json MAVEN version 4.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jodd:jodd-json and may be impacted: - org.jodd:jodd-joy 4.1.5 - org.jodd:jodd-madvoc 4.1.5 Source cves: CVE-2018-21234 Source advisory: OSV:GHSA-JRG3-QQ99-35G7...

com.intenthq.pucket:pucket-avro_2.10 (>=1.0.3, <=1.0.5), com.intenthq.pucket:pucket-avro_2.11 (>=1.0.3, <=1.0.5) +8 more potentially affected by CVE-2018-21234 via org.jodd:jodd-json (3.6.6)

org.jodd:jodd-json MAVEN version 3.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jodd:jodd-json and may be impacted: - com.intenthq.pucket:pucket-avro2.10 =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.5...

org.jodd:jodd-all (4.1.1), org.jodd:jodd-joy (4.1.1) +1 more potentially affected by CVE-2018-21234 via org.jodd:jodd-json (4.1.1)

org.jodd:jodd-json MAVEN version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jodd:jodd-json and may be impacted: - org.jodd:jodd-all 4.1.1 - org.jodd:jodd-joy 4.1.1 - org.jodd:jodd-madvoc 4.1.1 Source cves: CVE-2018-21234 Source advisory:...

org.jodd:jodd-joy (>=5.0.0, <=5.0.3), org.jodd:jodd-madvoc (>=5.0.0, <=5.0.3) potentially affected by CVE-2018-21234 via org.jodd:jodd-json (>=5.0.0, <=5.0.3)

org.jodd:jodd-json MAVEN version =5.0.0, =5.0.0, =5.0.0, =5.0.3 Source cves: CVE-2018-21234 Source advisory: OSV:GHSA-JRG3-QQ99-35G7...

org.jodd:jodd-all (3.8.0) potentially affected by CVE-2018-21234 via org.jodd:jodd-json (3.8.0)

org.jodd:jodd-json MAVEN version 3.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jodd:jodd-json and may be impacted: - org.jodd:jodd-all 3.8.0 Source cves: CVE-2018-21234 Source advisory: OSV:GHSA-JRG3-QQ99-35G7...

org.jodd:jodd-all (4.1.0), org.jodd:jodd-joy (4.1.0) +1 more potentially affected by CVE-2018-21234 via org.jodd:jodd-json (4.1.0)

org.jodd:jodd-json MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jodd:jodd-json and may be impacted: - org.jodd:jodd-all 4.1.0 - org.jodd:jodd-joy 4.1.0 - org.jodd:jodd-madvoc 4.1.0 Source cves: CVE-2018-21234 Source advisory:...

com.wedeploy:com.wedeploy.api-java.api-client (>=beta-20170331, <=0.0.1), com.wedeploy:com.wedeploy.common (>=beta-20170331, <=0.0.1) +3 more potentially affected by CVE-2018-21234 via org.jodd:jodd-json (3.8.1)

org.jodd:jodd-json MAVEN version 3.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jodd:jodd-json and may be impacted: - com.wedeploy:com.wedeploy.api-java.api-client =beta-20170331, =beta-20170331, =0.0.1 - me.wuwenbin:template-utils 1.1.0 -...

org.jodd:jodd-joy (4.3.1), org.jodd:jodd-madvoc (4.3.1) potentially affected by CVE-2018-21234 via org.jodd:jodd-json (4.3.1)

org.jodd:jodd-json MAVEN version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jodd:jodd-json and may be impacted: - org.jodd:jodd-joy 4.3.1 - org.jodd:jodd-madvoc 4.3.1 Source cves: CVE-2018-21234 Source advisory: OSV:GHSA-JRG3-QQ99-35G7...

org.jodd:jodd-all (4.0.0), org.jodd:jodd-joy (4.0.0) +1 more potentially affected by CVE-2018-21234 via org.jodd:jodd-json (4.0.0)

org.jodd:jodd-json MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jodd:jodd-json and may be impacted: - org.jodd:jodd-all 4.0.0 - org.jodd:jodd-joy 4.0.0 - org.jodd:jodd-madvoc 4.0.0 Source cves: CVE-2018-21234 Source advisory:...

org.jodd:jodd-joy (>=5.0.0, <=5.0.3), org.jodd:jodd-madvoc (>=5.0.0, <=5.0.3) potentially affected by CVE-2018-21234 via org.jodd:jodd-json (>=5.0.0, <=5.0.3)

org.jodd:jodd-json MAVEN version =5.0.0, =5.0.0, =5.0.0, =5.0.3 Source cves: CVE-2018-21234 Source advisory: GHSA-JRG3-QQ99-35G7...

org.jodd:jodd-joy (4.3.2), org.jodd:jodd-madvoc (4.3.2) potentially affected by CVE-2018-21234 via org.jodd:jodd-json (4.3.2)

org.jodd:jodd-json MAVEN version 4.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jodd:jodd-json and may be impacted: - org.jodd:jodd-joy 4.3.2 - org.jodd:jodd-madvoc 4.3.2 Source cves: CVE-2018-21234 Source advisory: OSV:GHSA-JRG3-QQ99-35G7...

org.jodd:jodd-all (3.9) potentially affected by CVE-2018-21234 via org.jodd:jodd-json (3.9)

org.jodd:jodd-json MAVEN version 3.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jodd:jodd-json and may be impacted: - org.jodd:jodd-all 3.9 Source cves: CVE-2018-21234 Source advisory: OSV:GHSA-JRG3-QQ99-35G7...

org.jodd:jodd-all (4.1.3), org.jodd:jodd-joy (4.1.3) +1 more potentially affected by CVE-2018-21234 via org.jodd:jodd-json (4.1.3)

org.jodd:jodd-json MAVEN version 4.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jodd:jodd-json and may be impacted: - org.jodd:jodd-all 4.1.3 - org.jodd:jodd-joy 4.1.3 - org.jodd:jodd-madvoc 4.1.3 Source cves: CVE-2018-21234 Source advisory:...

Deserialization Of Untrusted Object

jodd-json is vulnerable to deserialization of untrusted object. The vulnerability exists when the setClassMetadataName method was introduced, which fails to properly restrict certain types of classes during deserialization...

com.github.jherculesqz:core-fw (1.0), com.github.jherculesqz:core-fw-spring (1.0) +21 more potentially affected by CVE-2018-21234 via org.jodd:jodd-json (>=3.6.6, <=5.0.3)

org.jodd:jodd-json MAVEN version =3.6.6, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =beta-20170331, =beta-20170331, =1.0.1 and more Source cves: CVE-2018-21234 Source advisory: MEND:CVE-2018-21234...

Remote Code Execution Via JSON Deserialization

jodd-json is vulnerable to remote code execution via JSON deserialization. The JSON parser supports polymorphic deserialization when setClassMetadataName is set, which allows an attacker to execute arbitrary code using a crafted JSON request...