CVE-2023-3308
1 advisory.
Maven/com.whaleal.icefrog:icefrog-all CVE-2023-3308: medium 5.5, EPSS 1.11%
Whaleal IceFrog is vulnerable to deserialization
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.1.8 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-rx62-5cw6-x29q
- https://nvd.nist.gov/vuln/detail/CVE-2023-3308
- https://github.com/NanKeXXX/selfVuln_poc/blob/main/whaleal%3Aicefrog/icefrog_1.1.8_RCE.md
- https://github.com/NanKeXXX/selfVuln_poc/blob/main/whaleal:icefrog/icefrog_1.1.8_RCE.md
- https://github.com/whaleal/icefrog
- https://vuldb.com/?ctiid.231804
- https://vuldb.com/?id.231804
CVE-2023-3308 · published · modified · JSON