CVE-2020-1947
1 advisory.
Maven/org.apache.shardingsphere:shardingsphere CVE-2020-1947: critical 9.8, EPSS 33.92%
Deserialization of Untrusted Data in Apache ShardingSphere
Action: Upgrade org.apache.shardingsphere:shardingsphere to 4.0.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0-RC3 | 4.0.1 | - |
Fixed versions
| 4.0.1 |
Sources
- osv: GHSA-v54f-xcmp-43cr
- https://nvd.nist.gov/vuln/detail/CVE-2020-1947
- https://lists.apache.org/thread.html/r4a61a24c119bd820da6fb02100d286f8aae55c8f9b94a346b9bb27d8%40%3Cdev.shardingsphere.apache.org%3E
CVE-2020-1947 · published · modified · JSON