Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Seata

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-22399

    Apache Seata: Remote Code Execution vulnerability via Hessian Deserialization in Apache Seata Server

    Deserialization of Untrusted Data vulnerability in Apache Seata.  When developers disable authentication on the Seata-Server and do not use the Seata client SDK dependencies, they may construct uncontrolled serialized malicious requests by directly sending by…

    Apache Software Foundation Apache Seata org.apache.seata:seata-core Maven