CVE-2020-9493

 

Published at: - 16-06-2021 10:15

Last modified: - 08-04-2022 03:33

Total changes: - 5

Description

A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://www.openwall.com/lists/oss-security/2021/06/16/1
• [oss-security] 20210615 CVE-2020-9493: Apache Chainsaw: Java deserialization in Chainsaw-Mailing List, Third Party Advisory
• [announce] 20210615 CVE-2020-9493: Apache Chainsaw: Java deserialization in Chainsaw-Mailing List, Vendor Advisory
• [oss-security] 20220118 CVE-2022-23307: Apache Log4j 1.x: A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.-Mailing List, Third Party Advisory

 

Keywords

NVD

 

CVE-2020-9493

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures