Product · Apache Software Foundation

ShardingSphere-Agent

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.8

CVE-2023-28754

ShardingSphere-Agent: Deserialization vulnerability in ShardingSphere Agent

Deserialization of Untrusted Data vulnerability in Apache ShardingSphere-Agent, which allows attackers to execute arbitrary code by constructing a special YAML configuration file. The attacker needs to have permission to modify the ShardingSphere Agent YAML c…

Apache Software Foundation ShardingSphere-Agent org.apache.shardingsphere:shardingsphere Maven

Jul 19, 2023