CVE-2025-32897
1 advisory.
Maven/org.apache.seata:seata-config-core CVE-2025-32897: critical 9.8, EPSS 1.79%
Apache Seata Vulnerable to Deserialization of Untrusted Data
Action: Upgrade org.apache.seata:seata-config-core to 2.3.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.3.0 | - |
Fixed versions
| 2.3.0 |
Sources
- osv: GHSA-m964-fjrh-xxq2
- nvd: CVE-2025-32897
- https://github.com/apache/incubator-seata/commit/20cd9625d23f99b71fefc83b8db96c14092a9950
- https://github.com/apache/incubator-seata
- https://lists.apache.org/thread/9fhtf7yvpjpzlwd1m0wfgg6tp2btxpy1
- https://www.cve.org/CVERecord?id=CVE-2024-47552
CVE-2025-32897 · published · modified · JSON