PT-2020-7502
CVE-2013-4521
·
تاريخ النشر
2020-02-06
·
تاريخ التحديث
2020-02-13
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions:
Nuxeo Platform versions 5.6.0 through 5.6.0 before HF27
Nuxeo Platform versions 5.8.0 through 5.8.0 before HF-01
Description:
The issue allows remote attackers to execute arbitrary code via crafted serialized data because the RichFaces implementation does not restrict the classes for which deserialization methods can be called.
Recommendations:
For Nuxeo Platform versions 5.6.0 through 5.6.0 before HF27, apply Hotfix 27 to resolve the issue.
For Nuxeo Platform versions 5.8.0 through 5.8.0 before HF-01, apply Hotfix 01 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾