Product · Apache Software Foundation

Apache Flex Blaze DS

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2017-5641 EPSS 21%

Apache Flex BlazeDS unsafe deserialization

Previous versions of Apache Flex BlazeDS (4.7.2 and earlier) did not restrict which types were allowed for AMF(X) object deserialization by default. During the deserialization process code is executed that for several known types has undesired side-effects. O…

Apache Software Foundation Apache Flex Blaze DS org.apache.flex.blazeds:flex-messaging-remoting org.apache.flex.blazeds:flex-messaging-core Maven

Dec 28, 2017