Lucene search
Veracode Vulnerability DatabaseVERACODE:20635HistoryJul 01, 2019 - 4:24 a.m.
Remote Code Execution (RCE)
2019-07-0104:24:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.006 Low
EPSS
Percentile
79.2%
hessian is remote code execution (RCE) vulnerability. It misses the blacklisting of Resin Gadget due to improper handling of com.caucho.naming.QName and com.sun.org.apache.xpath.internal.objects.XString when the attacker sends malicious serialized Hessian object.
Related
osv
osv
Incomplete List of Disallowed Inputs in SOFA-Hessian
2019-03-06 17:36:08
cvelist
cvelist
CVE-2019-9212
2019-02-27 17:00:00
d0znpp
d0znpp
Spring RCE exploit I can’t explain
2019-07-17 00:22:22
prion
prion
Design/Logic Flaw
2019-02-27 17:29:00
gitlab
gitlab
Deserialization of Untrusted Data
2019-03-06 00:00:00
cve
cve
CVE-2019-9212
2019-02-27 17:29:00
nvd
nvd
CVE-2019-9212
2019-02-27 17:29:00
github
github
Incomplete List of Disallowed Inputs in SOFA-Hessian
2019-03-06 17:36:08