org.apache.ignite:ignite-zookeeper@2.7.0 vulnerabilities
latest version
2.16.0
latest non vulnerable version
first published
9 years ago
latest version published
1 years ago
licenses detected
- [1.4.0,)
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.apache.ignite:ignite-zookeeper package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to Class Serialization Filters being ignored for some Ignite endpoints. An attacker can execute arbitrary code on the server by sending a crafted message containing a vulnerable object whose class is present in the Ignite server classpath and sends it to Ignite server endpoints. How to fix Deserialization of Untrusted Data? Upgrade | [2.6.0,2.17.0) |