CVE-2025-53606
Apache Seata (incubating): Deserialization of untrusted Data in Apache Seata Server
Résumé
Apache Seata (incubating): Deserialization of untrusted Data in Apache Seata Server
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Deserialization of Untrusted Data vulnerability in Apache Seata (incubating).
This issue affects Apache Seata (incubating): 2.4.0.
Users are recommended to upgrade to version 2.5.0, which fixes the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- web openwall.com