Spring By Vmware Spring Integration vulnerabilities

1 known vulnerability affecting spring_by_vmware/spring_integration.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2020-5413CRITICALCVSS 9.8≥ 4.3, < v4.3.23.RELEASE≥ 5.1, < v5.1.12.RELEASE+2 more2020-07-31

CVE-2020-5413 [CRITICAL] CWE-502 CVE-2020-5413: Spring Integration framework provides Kryo Codec implementations as an alternative for Java (de)seri Spring Integration framework provides Kryo Codec implementations as an alternative for Java (de)serialization. When Kryo is configured with default options, all unregistered classes are resolved on demand. This leads to the "deserialization gadgets" exploit when provided data contains malicious code for execution during deserialization. In order to