The XStream extension in HP Fortify SCA before 2.2 RC3 allows remote attackers to execute arbitrary code via unsafe deserialization of XML messages.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HTalend Restlet
APPTalend2.2≤ 2.1.7
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCEDeserialization
CWE
Powiązane podatności
CVE-2012-2656HIGH7.5ten sam produkt
An XML eXternal Entity (XXE) issue exists in Restlet 1.1.10 in an endpoint using XML transport, which lets a r...
CVE-2021-42837CRITICAL9.8ten sam vendor
An issue was discovered in Talend Data Catalog before 7.3-20210930. After setting up SAML/OAuth, authenticatio...
CVE-2021-40684CRITICAL9.1ten sam vendor
Talend ESB Runtime in all versions from 5.1 to 7.3.1-R2021-09, 7.2.1-R2021-09, 7.1.1-R2021-09, has an unauthen...
CVE-2023-36301HIGH7.5ten sam vendor
Talend Data Catalog before 8.0-20230221 contain a directory traversal vulnerability in HeaderImageServlet.
CVE-2023-33247HIGH7.5ten sam vendor
Talend Data Catalog remote harvesting server before 8.0-20230413 contains a /upgrade endpoint that allows an u...