Lucene search

CVE-2024-43383 Apache Lucene.Net.Replicator: Remote Code Execution in Lucene.Net.Replicator

🗓️ 31 Oct 2024 09:29:57Reported by apacheType

Remote Code Execution in Apache Lucene.Net.Replicato

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2024-43383 Apache Lucene.Net.Replicator: Remote Code Execution in Lucene.Net.Replicator	31 Oct 202409:57	–	cvelist
Veracode	Insecure Deserialization	13 Nov 202410:54	–	veracode
NVD	CVE-2024-43383	31 Oct 202410:15	–	nvd
OSV	Apache Lucene.Net.Replicator Deserialization of Untrusted Data vulnerability	31 Oct 202412:30	–	osv
Github Security Blog	Apache Lucene.Net.Replicator Deserialization of Untrusted Data vulnerability	31 Oct 202412:30	–	github
CVE	CVE-2024-43383	31 Oct 202410:15	–	cve

[
  {
    "cpes": [
      "cpe:2.3:a:apache:lucene:*:*:*:*:*:*:*:*"
    ],
    "vendor": "apache",
    "product": "lucene",
    "versions": [
      {
        "status": "affected",
        "version": "4.8.0-beta00005",
        "versionType": "semver",
        "lessThanOrEqual": "4.8.0-beta00016"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
lists	www.lists.apache.org/thread/wlz1p76dxpt4rl9o29voxjd5zl7717nh

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

31 Oct 2024 09:57Current

7.8High risk

Vulners AI Score7.8

CVSS38

EPSS0.0004

SSVC

CWE-502