Maven/com.alibaba:fastjson CVE-2017-18349: critical 9.8, EPSS 38.84%
Improper Input Validation in alilibaba:fastjson
Action: Upgrade com.alibaba:fastjson to 1.2.31 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.31 | - |
Fixed versions
| 1.2.31 |
Sources
- osv: GHSA-xjrr-xv9m-4pw5
- https://nvd.nist.gov/vuln/detail/CVE-2017-18349
- https://github.com/pippo-java/pippo/issues/466
- https://github.com/pippo-java/pippo/commit/8443377d3c5b35acca190a66894b4f95e4051be2
- https://fortiguard.com/encyclopedia/ips/44059
- https://github.com/advisories/GHSA-xjrr-xv9m-4pw5
- https://github.com/alibaba/fastjson
- https://github.com/alibaba/fastjson/wiki/security_update_20170315
CVE-2017-18349 · published · modified · JSON