Security Advisory

CVE-2020-24164

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-09-11 05:49:06

Last updated 2024-08-04 15:05:11

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

A deserialization flaw is present in Taoensso Nippy before 2.14.2. In some circumstances, it is possible for an attacker to create a malicious payload that, when deserialized, will allow arbitrary code to be executed. This occurs because there is automatic use of the Java Serializable interface.

← Browse all CVEs View on cve.org ↗