Lucene search
+L

10 matches found

osv_ghsa
osv_ghsa
•added 2025/08/08 12:32 p.m.•30 views

GHSA-G358-G2PQ-C46J Apache Seata: Deserialization of untrusted Data in Apache Seata Server

Deserialization of Untrusted Data vulnerability in Apache Seata incubating. This issue affects Apache Seata incubating: 2.4.0. Users are recommended to upgrade to version 2.5.0, which fixes the issue...

9.3CVSS5.9AI score0.00728EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2025/08/08 12:32 p.m.•29 views

Apache Seata: Deserialization of untrusted Data in Apache Seata Server

Deserialization of Untrusted Data vulnerability in Apache Seata incubating. This issue affects Apache Seata incubating: 2.4.0. Users are recommended to upgrade to version 2.5.0, which fixes the issue...

9.8CVSS5.9AI score0.00728EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/08 12:00 a.m.•8 views

CVE-2025-53606: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Apache Seata incubating. This issue affects Apache Seata incubating: 2.4.0. Users are recommended to upgrade to version 2.5.0, which fixes the issue...

9.8CVSS5.9AI score0.00728EPSS
SaveExploits0References1
Mend
Mend
•added 2025/06/28 6:25 p.m.•9 views

CVE-2025-32897

Deserialization of Untrusted Data vulnerability in Apache Seata incubating. This security vulnerability is the same as CVE-2024-47552, but the version range described in the CVE-2024-47552 definition is too narrow. This issue affects Apache Seata incubating: from 2.0.0 before 2.3.0. Severity...

9.8CVSS8.4AI score0.02037EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/28 12:00 a.m.•7 views

CVE-2025-32897: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Apache Seata incubating. This security vulnerability is the same as CVE-2024-47552, but the version range described in the CVE-2024-47552 definition is too narrow. This issue affects Apache Seata incubating: from 2.0.0 before 2.3.0. Severity...

9.8CVSS8.5AI score0.02037EPSS
SaveExploits0References1
Mend
Mend
•added 2025/03/20 8:59 a.m.•8 views

CVE-2024-54016

Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Seata incubating. This issue affects Apache Seata incubating: through =2.2.0. Users are recommended to upgrade to version 2.3.0, which fixes the issue...

5.3CVSS5.5AI score0.00648EPSS
SaveExploits0References6
Mend
Mend
•added 2025/03/20 8:58 a.m.•8 views

CVE-2024-47552

Deserialization of Untrusted Data vulnerability in Apache Seata incubating. This issue affects Apache Seata incubating: from 2.0.0 before 2.2.0. Severity Justification: The Apache Seata security team assesses the severity of this vulnerability as "Low" due to stringent real-world mitigating...

9.8CVSS8.2AI score0.01246EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2025/03/20 12:00 a.m.•7 views

PT-2025-12017

Name of the Vulnerable Software and Affected Versions Apache Seata incubating versions through 2.2.0 Description The issue is related to improper handling of highly compressed data, also known as data amplification. This problem affects Apache Seata incubating. Recommendations For versions throug...

4.3CVSS5.4AI score0.00648EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/20 12:00 a.m.•5 views

CVE-2024-54016: Improper Handling of Highly Compressed Data (Data Amplification)

Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Seata incubating. This issue affects Apache Seata incubating: through =2.2.0. Users are recommended to upgrade to version 2.3.0, which fixes the issue...

4.3CVSS5.5AI score0.00648EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/20 12:00 a.m.•5 views

CVE-2024-47552: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Apache Seata incubating. This issue affects Apache Seata incubating: from 2.0.0 before 2.2.0. Severity Justification: The Apache Seata security team assesses the severity of this vulnerability as "Low" due to stringent real-world mitigating...

9.8CVSS8.3AI score0.01246EPSS
SaveExploits0References1
Rows per page
Query Builder