Drools vulnerabilities

1 known vulnerability in Drools from Red Hat. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  RHPAM 7.13.1 async: Deserialization of Untrusted Data

  CVE-2022-1415Sep 11, 2023Red HatEPSS 1.04%

  A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data. This flaw allows an authenticated attacker to construct malicious serialized objects (usually called gadgets) and achieve code execution on the se