{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.2.0"}],"component":"com.exadel.flamingo.flex:amf-serializer","cve_ids":["CVE-2017-3202"],"ecosystem":"Maven","epss":0.08071,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-j88v-q3vw-p9vr","id":"tcs_01M5N92D2ARJJGTGK3G0MAQ8EM","modified_at":"2024-02-16T08:23:17.318655Z","published_at":"2022-05-13T01:36:43Z","references":["https://osv.dev/vulnerability/GHSA-j88v-q3vw-p9vr","https://nvd.nist.gov/vuln/detail/CVE-2017-3202","https://codewhitesec.blogspot.com/2017/04/amf.html","http://www.securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-j88v-q3vw-p9vr","url":"https://osv.dev/vulnerability/GHSA-j88v-q3vw-p9vr"}],"summary":"Deserialization of Untrusted Data in Flamingo amf-serializer"}