Source |
The Hacker News |
Identifiant |
5185165 |
Date de publication |
2022-06-16 00:25:57 (vue: 2022-06-16 09:07:05) |
Titre |
High-Severity RCE Vulnerability Reported in Popular Fastjson Library |
Texte |
Cybersecurity researchers have detailed a recently patched high-severity security vulnerability in the popular Fastjson library that could be potentially exploited to achieve remote code execution.
Tracked as CVE-2022-25845 (CVSS score: 8.1), the issue relates to a case of deserialization of untrusted data in a supported feature called "AutoType." It was patched by the project maintainers in |
Notes |
|
Envoyé |
Oui |
Condensat |
2022 25845 achieve as cve autotype called case code could cvss cybersecurity data in detailed execution exploited fastjson feature have high library maintainers of deserialization patched popular potentially project rce recently remote reported researchers score: security severity supported the issue relates tracked untrusted vulnerability |
Tags |
Vulnerability
|
Stories |
|
Move |
|