Apache Software Foundation Shardingsphere-Agent vulnerabilities

1 known vulnerability affecting apache_software_foundation/shardingsphere-agent.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2023-28754HIGHCVSS 8.8≤ 5.3.22023-07-19

CVE-2023-28754 [HIGH] CWE-502 CVE-2023-28754: Deserialization of Untrusted Data vulnerability in Apache ShardingSphere-Agent, which allows attacke Deserialization of Untrusted Data vulnerability in Apache ShardingSphere-Agent, which allows attackers to execute arbitrary code by constructing a special YAML configuration file. The attacker needs to have permission to modify the ShardingSphere Agent YAML configuration file on the target machine, and the target machine can access the URL with the a