PT-2018-17481 · Facebook · Buck

Name of the Vulnerable Software and Affected Versions: Buck versions prior to v2018.06.25.01 Description: The issue arises from the Buck parser-cache command, which utilizes Java serialized objects to load and save state. If the state information is maliciously crafted, deserializing it could lea...