Name of the Vulnerable Software and Affected Versions c3p0 (affected versions not specified)

Description The software is susceptible to remote code execution through the use of maliciously crafted serialized objects and JNDI (Java Naming and Directory Interface) references. JNDI is a Java API that allows applications to discover and look up data and objects. An attacker can exploit this to execute arbitrary code, bypass security restrictions, or trigger a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.