Skip to content
OpenAdvisories

Vendor

Exadel

3 known vulnerabilities.

Products

Flamingo amf-serializer 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2017-3202

    The implementation of Action Message Format (AMF3) deserializers in Flamingo amf-serializer by Exadel, version 2.2.0, may allow instantiation of arbitrary classes due to improper code control

    The Java implementation of AMF3 deserializers used in Flamingo amf-serializer by Exadel, version 2.2.0, may allow instantiation of arbitrary classes via their public parameter-less constructor and subsequently call arbitrary Java Beans setter methods. The abi…

    Exadel Flamingo amf-serializer com.exadel.flamingo.flex:amf-serializer Maven