CVE-2024-47561

published 2024-10-03

CVE-2024-47561: Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to…

critical 9.2 CVSS 4.0

AV N AC L AT P PR N UI N VC H VI H VA H SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code.
Users are recommended to upgrade to version 1.11.4 or 1.12.0, which fix this issue.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
apache	avro	< 1.11.4	1.11.4
apache_software_foundation	apache_avro_java_sdk	< 1.11.4	1.11.4
atlassian	bamboo_data_center	—	—

CWE-502