Skip to content
OpenAdvisories

Package · Maven

org.mengyun:tcc-transaction

1 known vulnerabilities.

1 result · Feed

  • Medium 6.3

    changmingxie tcc-transaction Fastjson AutoType REST API Fastjson.parseObject deserialization

    A flaw has been found in changmingxie tcc-transaction up to 2.1.0. This issue affects the function Fastjson.parseObject of the component Fastjson AutoType REST API. This manipulation causes deserialization. It is possible to initiate the attack remotely. The …