Thorntech vulnerabilities
We track 1 vulnerability in Thorntech products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 31, 2023.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Thorntech vulnerabilities
- 9.8 Critical severity
sftp_gateway: Deserialization of Untrusted Data
Thorn SFTP gateway 3.4.x before 3.4.4 uses Pivotal Spring Framework for Java deserialization of untrusted data, which is not supported by Pivotal, a related issue to CVE-2016-1000027. Also, within the specific context of Thorn SFTP gateway, this leads to remot