Apache Seata vulnerabilities

1 known vulnerability in Apache Seata from Apache. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Apache Seata: Deserialization of Untrusted Data

  CVE-2024-22399Sep 16, 2024ApacheEPSS 3.29%

  Deserialization of Untrusted Data vulnerability in Apache Seata. When developers disable authentication on the Seata-Server and do not use the Seata client SDK dependencies, they may construct uncontrolled serialized malicious requests by directly sending byte