GitHub Advisoryadvisory · Maven

GHSA-vwgg-2q82-38c5 Solon is vulnerable to Deserialization of Untrusted Data

CRITICAL Published 2023-12-04 Modified 2023-12-08 Official page ↗
Aliases
CVE-2023-48967
Ecosystem
Maven
Packages
org.noear:solon
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-502
Reviewed
2023-12-08

Affected packages

• Maven org.noear:solon: <= 2.6.0 (no fix yet)

Description

Ssolon <= 2.6.0 and <=2.5.12 is vulnerable to Deserialization of Untrusted Data.

Related

Alias · CVE (1)

  • CVE-2023-48967 Ssolon <= 2.6.0 and <=2.5.12 is vulnerable to Deserialization of Untrusted Data. vulnerability

Weakness · CWE (1)

  • CWE-502 Deserialization of Untrusted Data weakness

References