CyberSecBulletin

Com.alibaba:fastjson vulnerabilities

We track 1 vulnerability in Com.alibaba:fastjson products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 10, 2022.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Com.alibaba:fastjson vulnerabilities

  • 9.8 Critical severity

    com.alibaba:fastjson: Deserialization of Untrusted Data

    CVE-2022-25845Com.alibaba:fastjsonEPSS 18.7%

    The package com.alibaba:fastjson before 1.2.83 are vulnerable to Deserialization of Untrusted Data by bypassing the default autoType shutdown restrictions, which is possible under certain conditions. Exploiting this vulnerability allows attacking remote server