Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vrmw-2xhq-hrmp

Опубликовано: 24 мая 2022
Источник: github
Github: Прошло ревью
CVSS3: 7.5

Описание

Wildfly Unsafe Deserialization Vulnerability

A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application Beans(EJB) due to lack of validation/filtering capabilities in wildfly.

Пакеты

Наименование

org.wildfly:wildfly-parent

maven
Затронутые версииВерсия исправления

< 20.0.0.Final

20.0.0.Final

EPSS

Процентиль: 58%
0.00373
Низкий

7.5 High

CVSS3

Дефекты

CWE-502

Связанные уязвимости

CVSS3: 7.5
redhat
больше 5 лет назад

A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application Beans(EJB) due to lack of validation/filtering capabilities in wildfly.

CVSS3: 6.6
nvd
больше 5 лет назад

A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application Beans(EJB) due to lack of validation/filtering capabilities in wildfly.

CVSS3: 6.6
debian
больше 5 лет назад

A vulnerability was found in Wildfly in versions before 20.0.0.Final, ...

EPSS

Процентиль: 58%
0.00373
Низкий

7.5 High

CVSS3

Дефекты

CWE-502