Tag: deserialization

VU#112992: Apache Struts 2 framework REST plugin insecurely deserializes untrusted XML data

by Cyberthreat Blog | Sep 6, 2017 | CERT-Vulnerabilities | 0 |

Vulnerability Note VU#112992 <h2>Apache Struts 2 framework REST plugin insecurely deserializes untrusted XML data</h2> <p class=”meta-text”>Original Release date: 06 Sep 2017 | Last revised: 06 Sep...

VU#307983: Action Message Format (AMF3) Java implementations are vulnerable to insecure deserialization and XML external entities references

by Cyberthreat Blog | Apr 4, 2017 | CERT-Vulnerabilities | 0 |

Vulnerability Note VU#307983 <h2>Action Message Format (AMF3) Java implementations are vulnerable to insecure deserialization and XML external entities references</h2> <p class=”meta-text”>Original...