Maven/org.apache.cayenne:cayenne-server CVE-2022-24289: high 8.8, EPSS 2.28%
Deserialization of untrusted data in Apache Cayenne
Action: Upgrade org.apache.cayenne:cayenne-server to 4.1.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.1.1 | - |
Fixed versions
| 4.1.1 |
Sources
- osv: GHSA-c58c-w527-h77p
- https://nvd.nist.gov/vuln/detail/CVE-2022-24289
- https://lists.apache.org/thread/zthjy83t3o66x7xcbygn2vg3yjvlc9vc
- http://www.openwall.com/lists/oss-security/2022/02/11/1
CVE-2022-24289 · published · modified · JSON