VDB
BDU%3A2025-00105
BDU%3A2025-00105
PUBLISHED
CVSS 10 CRITICAL
Уязвимость декодера ObjectSerializationDecoder фреймворка сетевых Java-приложений Apache MINA, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation | MINA |
Timeline
- Jan 9, 2025 CVE Published
- Aug 13, 2025 CVE Updated
References
- https://thehackernews.com/2024/12/apache-mina-cve-2024-52046-cvss-100.html url
- http://www.openwall.com/lists/oss-security/2024/12/25/1 url
- https://security.netapp.com/advisory/ntap-20250103-0001/ url
- https://mina.apache.org/downloads-mina_2_0.html advisory
- https://mina.apache.org/downloads-mina_2_1.html advisory
- https://mina.apache.org/downloads-mina_2_2.html advisory
- https://lists.apache.org/thread/4wxktgjpggdbto15d515wdctohb0qmv8 advisory