Apache Geode unsafe deserialization of application objects

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2017-15693 · ADVISORY
• apache/geode#1166 · WEB
• issues.apache.org/jira/browse/GEODE-3923 · WEB
• lists.apache.org/thread.html/cc3ec1d06062f54fdaa0357874c1d148fc54bb955f2d2df4ca328a3d@%3Cuser.geode.apache.org%3E · WEB
• securityfocus.com/bid/103206 · Third Party Advisory
• lists.apache.org/thread.html/cc3ec1d06062f54fdaa0357874c1d148fc54bb955f2d2df4ca328a3d%40%3Cuser.geode.apache.org%3E

Lỗ hổng khác của org.apache.geode:geode-core

• CVE-2022-34870TRUNG BÌNH 5.4Apache Geode versions up to 1.15.0 are vulnerable to a Cross-Site Scripting (XSS) via data injection when using Pulse web application to vie…
• CVE-2022-37023TRUNG BÌNH 6.5Apache Geode versions prior to 1.15.0 are vulnerable to a deserialization of untrusted data flaw when using REST API on Java 8 or Java 11. A…
• CVE-2022-37022CAO 8.8Apache Geode versions up to 1.12.2 and 1.13.2 are vulnerable to a deserialization of untrusted data flaw when using JMX over RMI on Java 11.…
• CVE-2022-37021NGHIÊM TRỌNG 9.8Apache Geode versions up to 1.12.5, 1.13.4 and 1.14.0 are vulnerable to a deserialization of untrusted data flaw when using JMX over RMI on …
• CVE-2021-34797CAO 7.5Apache Geode versions up to 1.12.4 and 1.13.4 are vulnerable to a log file redaction of sensitive information flaw when using values that be…