ID | CVE-2022-25647 | ||||||
Sažetak | The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks. | ||||||
Reference |
|
||||||
CVSS |
|
||||||
Pristup |
|
||||||
Impact |
|
||||||
CVSS vektor | AV:N/AC:L/Au:N/C:N/I:N/A:P | ||||||
Zadnje važnije ažuriranje | 28-11-2022 - 17:33 | ||||||
Objavljeno | 01-05-2022 - 16:15 |