CVE-2017-3203
1 advisory.
Maven/org.springframework.flex:spring-flex CVE-2017-3203: high 8.1, EPSS 6.23%
Deserialization of Untrusted Data in Spring-flex
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.5.2.RELEASE |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-8v4h-j42h-wfhc
- https://nvd.nist.gov/vuln/detail/CVE-2017-3203
- https://codewhitesec.blogspot.com/2017/04/amf.html
- https://www.kb.cert.org/vuls/id/307983
- http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution
CVE-2017-3203 · published · modified · JSON