Lucene search
+L

1 matches found

GitLab Advisory Database
GitLab Advisory Database
added 2022/06/10 12:0 a.m.51 views

Unsafe deserialization in com.alibaba:fastjson

The package com.alibaba:fastjson before 1.2.83 is vulnerable to Deserialization of Untrusted Data by bypassing the default autoType shutdown restrictions, which is possible under certain conditions. Exploiting this vulnerability allows attacking remote servers. Workaround: If upgrading is not...

9.8CVSS6.1AI score0.17767EPSS
SaveExploits6References8Affected Software1
Rows per page
Query Builder