CVE-2017-8045
1 advisory.
Maven/org.springframework.amqp:spring-amqp CVE-2017-8045: critical 9.8, EPSS 3.55%
Deserialization of Untrusted Data in Spring AMQP
Action: Upgrade org.springframework.amqp:spring-amqp to 1.5.7 (1.5.x), 1.6.11 (1.6.x) or 1.7.4 (1.7.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.7 | - |
| 1.6.0 | 1.6.11 | - |
| 1.7.0 | 1.7.4 | - |
Fixed versions
| 1.5.7 | 1.6.11 | 1.7.4 |
Sources
- osv: GHSA-vqqg-xgv7-cf68
- https://nvd.nist.gov/vuln/detail/CVE-2017-8045
- https://pivotal.io/security/cve-2017-8045
- http://www.securityfocus.com/bid/100936
CVE-2017-8045 · published · modified · JSON