Skip to content
OpenAdvisories

Package · Maven

org.apache.olingo:odata-client-proxy

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2019-17556

    Deserialization of Untrusted Data in Apache Olingo

    Apache Olingo versions 4.0.0 to 4.6.0 provide the AbstractService class, which is public API, uses ObjectInputStream and doesn't check classes being deserialized. If an attacker can feed malicious metadata to the class, then it may result in running attacker'…

    Apache Olingo org.apache.olingo:odata-client-proxy Maven