Deserialization Of Untrusted Data

🗓️ 29 Aug 2023 08:56:38Reported by Veracode Vulnerability DatabaseType

org.springframework.kafka vulnerability in Deserialization Of Untrusted Dat

Reporter	Title	Published	Views	Family All 20
GithubExploit	Exploit for Deserialization of Untrusted Data in Vmware Spring_For_Apache_Kafka	28 Sep 202311:18	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Vmware Spring_For_Apache_Kafka	24 Apr 202403:54	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	30 Jan 202404:12	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.11 addresses multiple security vulnerabilities.	20 Dec 202316:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	17 Oct 202400:20	–	ibm
IBM Security Bulletins	Security Bulletin: VMware Tanzu Spring for Apache Kafka is vulnerable to CVE-2023-34040 used in IBM Maximo Application Suite - Monitor Component	26 Sep 202318:33	–	ibm
Circl	CVE-2023-34040	24 Aug 202316:14	–	circl
CNNVD	Spring Framework 代码问题漏洞	24 Aug 202300:00	–	cnnvd
CVE	CVE-2023-34040	24 Aug 202312:59	–	cve
Cvelist	CVE-2023-34040 Java Deserialization vulnerability in Spring-Kafka When Improperly Configured	24 Aug 202312:59	–	cvelist

Vulners

Node

springframework spring-kafkaRange2.2.1.RELEASE–2.9.10java

Source	Link
spring	www.spring.io/security/cve-2023-34040
github	www.github.com/spring-projects/spring-kafka/commit/25ac793a78725e2ca4a3a2888a1506a4bfcf0c9d
github	www.github.com/advisories/GHSA-crqf-q9fp-hwjw

18 Oct 2023 18:18Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.15.3 - 7.8

EPSS0.21413

SSVC