Description
Ssolon <= 2.6.0 and <=2.5.12 is vulnerable to Deserialization of Untrusted Data.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.noear:solon | <= 2.6.0 | — | GHSA-vwgg-2q82-38c5 |
Critical · 9.8
CVE-2023-48967
EUVD-2023-3305GHSA-vwgg-2q82-38c5
Solon is vulnerable to Deserialization of Untrusted Data
Published Dec 4, 2023 · Updated Aug 2, 2024 · Assigned by mitre