CVE-2024-47561
Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)
Résumé
Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code.
Users are recommended to upgrade to version 1.11.4 or 1.12.0, which fix this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- advisory security.netapp.com
- web openwall.com
- web repo.maven.apache.org