CVE-2024-47561
Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)
概要
Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code.
Users are recommended to upgrade to version 1.11.4 or 1.12.0, which fix this issue.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- advisory security.netapp.com
- web openwall.com
- web repo.maven.apache.org