9.8
Critique
CVE-2020-9493 A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution
Description
A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Chainsaw 2.1 | premières → < 2.1.0 | 2.1.0 |
Références
- www.openwall.com www.openwall.com
- [oss-security] 20210615 CVE-2020-9493: Apache Chainsaw: Java deserialization in Chainsaw www.openwall.com
- [announce] 20210615 CVE-2020-9493: Apache Chainsaw: Java deserialization in Chainsaw lists.apache.org
- [oss-security] 20220118 CVE-2022-23307: Apache Log4j 1.x: A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. www.openwall.com
Chronologie
- Publiée
- Dernière modification