Apache MINA CVE-2024-52046: CVSS 10.0 Flaw Enables RCE via Unsafe Serialization
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-43441 | Authentication Bypass in Apache HugeGraph-Server (CVE-2024-43441) | 9.8 | 69% | ||
| CVE-2024-45387 | Authenticated SQL Injection in Apache Traffic Control Traffic Ops | 8.8 | 42% | ||
| CVE-2024-52046 | Unauthenticated RCE in Apache MINA via Insecure Java Deserialization | 10.0 | 24% | ||
| CVE-2024-53677 | Path Traversal in Apache Struts File Upload Leading to RCE (CVE-2024-53677) | 9.5 | 78% | ||
| CVE-2024-56337 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat | 9.8 | 9% |
From the original article
1 min read at thehackernews.com
Ravie Lakshmanan Dec 27, 2024 Vulnerability / Software Security The Apache Software Foundation (ASF) has released patches to address a maximum severity vulnerability in the MINA Java network application framework that could result in remote code execution under specific conditions. Tracked as CVE-2024-52046 , the vulnerability carries a CVSS score of 10. 0.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.