Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40651
HistoryMay 24, 2023 - 2:42 a.m.

Deserialization Of Untrusted Data

2023-05-2402:42:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
vulnerability
deserialization of untrusted data
url injection

0.002 Low

EPSS

Percentile

53.6%

org.apache.inlong:manager-pojo is vulnerable to Deserialization Of Untrusted Data. The vulnerability exists in multiple functions because an attacker is able to add whitespaces when saving a url, which allows bypassing the autoDeserialize option filtering, resulting in deserialization of potentially malicious data.

0.002 Low

EPSS

Percentile

53.6%

Related for VERACODE:40651