Description
A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apache Software Foundation | Apache Chainsaw | Apache Chainsaw – < 2.1.0 | 2.1.0 |
Advisories 2
- WID-SEC-2024-0794 Dell ECS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
- WID-SEC-2024-0064 Juniper Produkte: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 10, 2025
References
- https://www.openwall.com/lists/oss-security/2021/06/16/1
- [oss-security] 20210615 CVE-2020-9493: Apache Chainsaw: Java deserialization in Chainsaw mailing-list
- [announce] 20210615 CVE-2020-9493: Apache Chainsaw: Java deserialization in Chainsaw mailing-list
- [oss-security] 20220118 CVE-2022-23307: Apache Log4j 1.x: A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. mailing-list