org.springframework.integration:spring-integration-core

1 result · Feed

• Critical 9.8
  CVE-2020-5413

  Kryo Configuration Allows Code Execution with Unknown "Serialization Gadgets"

  Spring Integration framework provides Kryo Codec implementations as an alternative for Java (de)serialization. When Kryo is configured with default options, all unregistered classes are resolved on demand. This leads to the "deserialization gadgets" exploit w…

  Spring by VMware Spring Integration org.springframework.integration:spring-integration-core Maven
  Jul 31, 2020