Maven/org.terasoluna.gfw:terasoluna-gfw-common CVE-2022-43484: high 7.8, EPSS 0.42%
TERASOLUNA Server Framework vulnerable to ClassLoader manipulation
Action: Upgrade org.terasoluna.gfw:terasoluna-gfw-common to 1.0.1.RELEASE or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.1.RELEASE | - |
Fixed versions
| 1.0.1.RELEASE |
Sources
- osv: GHSA-q5j9-f95w-f4pr
- https://nvd.nist.gov/vuln/detail/CVE-2022-43484
- https://github.com/spring-projects/spring-framework/issues/15724
- https://github.com/terasolunaorg/terasoluna-gfw
- https://jvn.jp/en/jp/JVN54728399/index.html
- https://osdn.net/projects/terasoluna/wiki/cve-2022-43484
- http://terasolunaorg.github.io/vulnerability/cve-2022-43484.html
CVE-2022-43484 · published · modified · JSON