Deserialization Of Untrusted Data

2022-09-0105:03:14

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

apache-geode

deserialization

untrusted data

jmx/rmi

code injection

EPSS

0.003

Percentile

68.4%

JSON

apache-geode is vulnerable to deserialization of untrusted data. The vulnerability exists because the serialization filtering is not properly configured for JMX/RMI which allows an attacker to to inject and execute arbitrary code through the untrusted data.