org.redisson:redisson-tomcat (2.12.2), org.redisson:redisson-tomcat-6 (2.12.2) +2 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.12.2)

org.redisson:redisson MAVEN version 2.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - org.redisson:redisson-tomcat 2.12.2 - org.redisson:redisson-tomcat-6 2.12.2 - org.redisson:redisson-tomcat-7 2.12.2 ...

org.redisson:redisson-tomcat (2.12.3), org.redisson:redisson-tomcat-6 (2.12.3) +2 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.12.3)

org.redisson:redisson MAVEN version 2.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - org.redisson:redisson-tomcat 2.12.3 - org.redisson:redisson-tomcat-6 2.12.3 - org.redisson:redisson-tomcat-7 2.12.3 ...

org.redisson:redisson-tomcat (2.12.5), org.redisson:redisson-tomcat-6 (2.12.5) +2 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.12.5)

org.redisson:redisson MAVEN version 2.12.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - org.redisson:redisson-tomcat 2.12.5 - org.redisson:redisson-tomcat-6 2.12.5 - org.redisson:redisson-tomcat-7 2.12.5 ...

com.github.slacrey:redisson-extend (>=1.1.2150, <=2.15.0), org.redisson:redisson-hibernate (2.15.0) +15 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.15.0)

org.redisson:redisson MAVEN version 2.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.github.slacrey:redisson-extend =1.1.2150, =2.15.0 - org.redisson:redisson-hibernate 2.15.0 -...

org.redisson:redisson-hibernate (2.15.1), org.redisson:redisson-hibernate-4 (2.15.1) +14 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.15.1)

org.redisson:redisson MAVEN version 2.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - org.redisson:redisson-hibernate 2.15.1 - org.redisson:redisson-hibernate-4 2.15.1 - org.redisson:redisson-hibernate-...

com.datorama.oss:redison-replicated-map (1.0.0), com.datorama.oss:redisson-replicated-map (1.0.0) potentially affected by CVE-2023-42809 via org.redisson:redisson (2.2.22)

org.redisson:redisson MAVEN version 2.2.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.datorama.oss:redison-replicated-map 1.0.0 - com.datorama.oss:redisson-replicated-map 1.0.0 Source cves:...

com.github.debop:hibernate-redis (2.3.0), com.testvagrant:optimus (>=1.2.0, <=1.3.6) potentially affected by CVE-2023-42809 via org.redisson:redisson (2.3.0)

org.redisson:redisson MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.github.debop:hibernate-redis 2.3.0 - com.testvagrant:optimus =1.2.0, =1.3.6 Source cves: CVE-2023-42809 Source...

com.github.debop:hibernate-redis (2.3.1) potentially affected by CVE-2023-42809 via org.redisson:redisson (2.5.0)

org.redisson:redisson MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.github.debop:hibernate-redis 2.3.1 Source cves: CVE-2023-42809 Source advisory: OSV:GHSA-4HVC-QWR2-F8RV...

org.redisson:redisson-tomcat (2.12.1), org.redisson:redisson-tomcat-6 (2.12.1) +2 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.12.1)

org.redisson:redisson MAVEN version 2.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - org.redisson:redisson-tomcat 2.12.1 - org.redisson:redisson-tomcat-6 2.12.1 - org.redisson:redisson-tomcat-7 2.12.1 ...

org.redisson:redisson-tomcat (2.12.4), org.redisson:redisson-tomcat-6 (2.12.4) +2 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.12.4)

org.redisson:redisson MAVEN version 2.12.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - org.redisson:redisson-tomcat 2.12.4 - org.redisson:redisson-tomcat-6 2.12.4 - org.redisson:redisson-tomcat-7 2.12.4 ...

Security Bulletin: Security Vulnerabilities in redisson package affect IBM Voice Gateway

Summary Security Vulnerabilities in redisson package affect the SMS Gateway component of IBM Voice Gateway Vulnerability Details CVEID: CVE-2023-42809 DESCRIPTION: Redisson could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By persuadi...

CVE-2023-42809

Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients into communicating with a malicious serv...

Deserialization of untrusted data

Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients into communicating with a malicious serv...

CVE-2023-42809 Redisson unsafe deserialization vulnerability

Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients into communicating with a malicious serv...

CVE-2023-42809 Redisson unsafe deserialization vulnerability

Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients into communicating with a malicious serv...

CVE-2023-42809 Redisson unsafe deserialization vulnerability

Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients into communicating with a malicious serv...

CVE-2023-42809

CVE-2023-42809 affects the Redisson Java Redis client (Netty). Before version 3.22.0, responses from a malicious Redis server could contain crafted Java objects that are deserialized by the client without sufficient validation, enabling arbitrary code execution and potential full system compromis...

CVE-2023-42809

Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients into communicating with a malicious serv...

CVE-2023-42809: Deserialization of Untrusted Data

Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients into communicating with a malicious serv...

Redisson Code Issue Vulnerability

Redisson is a Java memory-resident data grid from Redisson open source. A code issue vulnerability exists in Redisson version 3.22.0, which stems from the fact that some messages received from a Redis server contain client-side deserialized Java objects without further validation, which can be...