9.8
Critical
CVE-2020-9493 A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution
Description
A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Chainsaw 2.1 | earliest → < 2.1.0 | 2.1.0 |
References
- www.openwall.com www.openwall.com
- [oss-security] 20210615 CVE-2020-9493: Apache Chainsaw: Java deserialization in Chainsaw www.openwall.com
- [announce] 20210615 CVE-2020-9493: Apache Chainsaw: Java deserialization in Chainsaw lists.apache.org
- [oss-security] 20220118 CVE-2022-23307: Apache Log4j 1.x: A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. www.openwall.com
Timeline
- Published
- Last modified