{"action":"Upgrade org.apache.flex.blazeds:flex-messaging-remoting to 4.7.3 or later.","affected":[{"fixed":"4.7.3","introduced":"0"}],"component":"org.apache.flex.blazeds:flex-messaging-remoting","cve_ids":["CVE-2017-5641"],"ecosystem":"Maven","epss":0.20747,"exploited":false,"fixed_versions":["4.7.3"],"ghsa_id":"GHSA-w8v7-prhw-xjpw","id":"tcs_01M5N9FZ8Q7PJ2J0MCVKXS4DNF","modified_at":"2024-02-16T08:00:32.866084Z","published_at":"2022-05-13T01:02:10Z","references":["https://osv.dev/vulnerability/GHSA-w8v7-prhw-xjpw","https://nvd.nist.gov/vuln/detail/CVE-2017-5641","https://github.com/apache/flex-blazeds/commit/11b0aa132d9a43bf81fa12654ff227ff247b4627","https://github.com/apache/flex-blazeds/commit/f861f0993c35e664906609cad275e45a71e2aaf1","https://github.com/apache/flex-blazeds","https://issues.apache.org/jira/browse/FLEX-35290","https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03823en_us","https://web.archive.org/web/20170920093830/http://www.securitytracker.com/id/1038273","https://web.archive.org/web/20210124021605/http://www.securityfocus.com/bid/97383","https://www.kb.cert.org/vuls/id/307983","https://www.zerodayinitiative.com/advisories/ZDI-22-506","https://www.zerodayinitiative.com/advisories/ZDI-22-507","http://mail-archives.apache.org/mod_mbox/flex-dev/201703.mbox/%3C6B86C8D0-6E36-48F5-AC81-4AB3978F6746@c-ware.de%3E"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-w8v7-prhw-xjpw#Maven/org.apache.flex.blazeds:flex-messaging-remoting","url":"https://osv.dev/vulnerability/GHSA-w8v7-prhw-xjpw"}],"summary":"Apache Flex BlazeDS unsafe deserialization"}