PT-2025-32351 · Apache · Apache Seata
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Apache Seata (incubating) version 2.4.0
Description
The software is susceptible to deserialization of untrusted data. This issue could allow attackers to execute arbitrary code.
Recommendations
Upgrade to version 2.5.0.
Exploit
Fix
RCE
Deserialization of Untrusted Data
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Apache Seata