CVE-2024-45772
1 advisory.
Maven/org.apache.lucene:lucene-replicator CVE-2024-45772: medium 5.1
Deserialization of Untrusted Data vulnerability in Apache Lucene Replicator.
Action: Upgrade org.apache.lucene:lucene-replicator to 9.12.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.4.0 | 9.12.0 | - |
Fixed versions
| 9.12.0 |
Sources
- osv: GHSA-g643-xq6w-r67c
- https://nvd.nist.gov/vuln/detail/CVE-2024-45772
- https://gitbox.apache.org/repos/asf?p=lucene.git
- https://lists.apache.org/thread/3f3oph7bqnqspb9q5p0gm5mgc1b6thjo
- http://www.openwall.com/lists/oss-security/2024/09/29/1
CVE-2024-45772 · published · modified · JSON