Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2024/08/05 9:29 p.m.30 views

Redisson vulnerable to Deserialization of Untrusted Data

Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients into communicating with a malicious serv...

9.6CVSS7.5AI score0.00944EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2023/10/04 8:15 p.m.10 views

CVE-2023-42809

Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients into communicating with a malicious serv...

9.6CVSS9.7AI score0.00944EPSS
Exploits1References2
Prion
Prion
added 2023/10/04 8:15 p.m.15 views

Deserialization of untrusted data

Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients into communicating with a malicious serv...

6.8CVSS9AI score0.00944EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/04 7:18 p.m.16 views

CVE-2023-42809 Redisson unsafe deserialization vulnerability

Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients into communicating with a malicious serv...

9.6CVSS7.9AI score0.00944EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/10/04 7:18 p.m.12 views

CVE-2023-42809 Redisson unsafe deserialization vulnerability

Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage to trick clients into communicating with a malicious serv...

9.6CVSS9.8AI score0.00944EPSS
Exploits1References2
CVE
CVE
added 2023/10/04 7:18 p.m.65 views

CVE-2023-42809

CVE-2023-42809 affects the Redisson Java Redis client (Netty). Before version 3.22.0, responses from a malicious Redis server could contain crafted Java objects that are deserialized by the client without sufficient validation, enabling arbitrary code execution and potential full system compromis...

9.6CVSS9.4AI score0.00944EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder