Source |
The Hacker News |
Identifiant |
8630477 |
Date de publication |
2024-12-27 12:16:00 (vue: 2024-12-27 07:08:03) |
Titre |
Apache MINA CVE-2024-52046: CVSS 10.0 Flaw Enables RCE via Unsafe Serialization |
Texte |
The Apache Software Foundation (ASF) has released patches to address a maximum severity vulnerability in the MINA Java network application framework that could result in remote code execution under specific conditions.
Tracked as CVE-2024-52046, the vulnerability carries a CVSS score of 10.0. It affects versions 2.0.X, 2.1.X, and 2.2.X.
"The ObjectSerializationDecoder in Apache MINA uses Java\'s
The Apache Software Foundation (ASF) has released patches to address a maximum severity vulnerability in the MINA Java network application framework that could result in remote code execution under specific conditions.
Tracked as CVE-2024-52046, the vulnerability carries a CVSS score of 10.0. It affects versions 2.0.X, 2.1.X, and 2.2.X.
"The ObjectSerializationDecoder in Apache MINA uses Java\'s |
Notes |
★★
|
Envoyé |
Oui |
Condensat |
2024 52046 52046: address affects apache application asf carries code conditions could cve cvss enables execution flaw foundation framework has java maximum mina network objectserializationdecoder patches rce released remote result score serialization severity software specific tracked under unsafe uses versions vulnerability |
Tags |
Vulnerability
|
Stories |
|
Move |
|