cve.bz

CWE-502: Deserialization of Untrusted Data, page 51

Filter

The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

What the weakness is: CWE-502 at MITRE

Ask an AI about CWE-502

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-502: Deserialization of Untrusted Data and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/502.html and https://cve.bz/cve/cwe/502?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2023-40121EPSS 0.2%

    In appendEscapedSQLString of DatabaseUtils.java, there is a possible SQL injection due to unsafe deserialization. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exp…

  2. 9.8CVE-2023-46604KEVExploitEPSS >99.9%

    The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipul…

  3. 9.8CVE-2023-43208KEVExploitEPSS 86%

    NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that this vulnerability is caused by the incomplete patch of CVE-2023-37679.

  4. 8.1CVE-2023-4386EPSS 0.9%

    The Essential Blocks plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.2.0 via deserialization of untrusted input in the get_posts function. This allows unauthenticated attackers to inject a PHP…

  5. 8.8CVE-2022-3342EPSS 1.0%

    The Jetpack CRM plugin for WordPress is vulnerable to PHAR deserialization via the ‘zbscrmcsvimpf’ parameter in the 'zeroBSCRM_CSVImporterLitehtml_app' function in versions up to, and including, 5.3.1. While the function performs a nonce c…

  6. 9.8CVE-2023-4402EPSS 1.5%

    The Essential Blocks plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.2.0 via deserialization of untrusted input in the get_products function. This allows unauthenticated attackers to inject a …

  7. 9.8CVE-2023-39680EPSS 0.6%

    Sollace Unicopia version 1.1.1 and before was discovered to deserialize untrusted data, allowing attackers to execute arbitrary code.

  8. 7.8CVE-2023-34052EPSS 0.2%

    VMware Aria Operations for Logs contains a deserialization vulnerability. A malicious actor with non-administrative access to the local system can trigger the deserialization of data which could result in authentication bypass.

  9. 8.8CVE-2023-35186EPSS 2.6%

    The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an authenticated user to abuse SolarWinds service resulting in remote code execution.

  10. 9.8CVE-2023-35184EPSS 1.7%

    The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse a SolarWinds service resulting in a remote code execution.

  11. 9.8CVE-2023-35182EPSS 2.6%

    The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability can be abused by unauthenticated users on SolarWinds ARM Server.

  12. 8.8CVE-2023-35180EPSS 29%

    The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows authenticated users to abuse SolarWinds ARM API.

  13. 7.5CVE-2023-46227EPSS 1.4%

    Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong. This issue affects Apache InLong: from 1.4.0 through 1.8.0, the attacker can use \t to bypass. Users are advised to upgrade to Apache InLong's 1.…

  14. 4.3CVE-2023-34050EPSS 1.8%

    In spring AMQP versions 1.0.0 to 2.4.16 and 3.0.0 to 3.0.9 , allowed list patterns for deserializable class names were added to Spring AMQP, allowing users to lock down deserialization of data in messages from untrusted sources; however by…

  15. 10.0CVE-2023-45146EPSS 1.3%

    XXL-RPC is a high performance, distributed RPC framework. With it, a TCP server can be set up using the Netty framework and the Hessian serialization mechanism. When such a configuration is used, attackers may be able to connect to the ser…

  16. 9.8CVE-2023-35084EPSS 3.8%

    Unsafe Deserialization of User Input could lead to Execution of Unauthorized Operations in Ivanti Endpoint Manager 2022 su3 and all previous versions, which could allow an attacker to execute commands remotely.

  17. 7.2CVE-2023-4971EPSS 1.2%

    The Weaver Xtreme Theme Support WordPress plugin before 6.3.1 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import a malicious file and a suitable gadget chain is…

  18. 7.2CVE-2023-23930EPSS 1.1%

    vantage6 is privacy preserving federated learning infrastructure. Versions prior to 4.0.0 use pickle, which has known security issue, as a default serialization module but that has known security issues. All users of vantage6 that post tas…

  19. 9.0CVE-2023-44392EPSS 0.8%

    Garden provides automation for Kubernetes development and testing. Prior tov ersions 0.13.17 and 0.12.65, Garden has a dependency on the cryo library, which is vulnerable to code injection due to an insecure implementation of deserializati…

  20. 9.8CVE-2023-26153EPSS 3.8%

    Versions of the package geokit-rails before 2.5.0 are vulnerable to Command Injection due to unsafe deserialisation of YAML within the 'geo_location' cookie. This issue can be exploited remotely via a malicious cookie value. **Note:** A…

  21. 9.8CVE-2023-43981EPSS 0.7%

    Presto Changeo testsitecreator up to 1.1.1 was discovered to contain a deserialization vulnerability via the component delete_excluded_folder.php.

  22. 8.8CVE-2023-42809EPSS 1.1%

    Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received from the Redis server contain Java objects that the client deserializes without further validation. Attackers that manage…

  23. 9.8CVE-2023-5391EPSS 0.9%

    A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker to execute arbitrary code on the targeted system by sending a specifically crafted packet to the application.

  24. 8.8CVE-2023-43176EPSS 1.6%

    A deserialization vulnerability in Afterlogic Aurora Files v9.7.3 allows attackers to execute arbitrary code via supplying a crafted .sabredav file.

  25. 8.8CVE-2023-43268EPSS 1.2%

    Deyue Remote Vehicle Management System v1.1 was discovered to contain a deserialization vulnerability.

  26. 7.5CVE-2023-39410EPSS 2.2%

    When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Java applications using Apache Avro Java SDK up …

  27. 9.8CVE-2023-44273EPSS 1.1%

    Consensys gnark-crypto through 0.11.2 allows Signature Malleability. This occurs because deserialisation of EdDSA and ECDSA signatures does not ensure that the data is in a certain interval.

  28. 8.8CVE-2023-5183EPSS 1.8%

    Unsafe deserialization of untrusted JSON allows execution of arbitrary code on affected releases of the Illumio PCE. Authentication to the API is required to exploit this vulnerability. The flaw exists within the network_traffic API endpoi…

  29. 9.8CVE-2023-43291EPSS 2.0%

    Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component.

  30. 8.8CVE-2023-40044KEVExploitEPSS 90%

    In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.

  31. 9.8CVE-2023-40619EPSS 1.3%

    phpPgAdmin 7.14.4 and earlier is vulnerable to deserialization of untrusted data which may lead to remote code execution because user-controlled data is directly passed to the PHP 'unserialize()' function in multiple places. An example is …

  32. 9.8CVE-2023-5016EPSS 1.0%

    A vulnerability was found in spider-flow up to 0.5.0. It has been declared as critical. Affected by this vulnerability is the function DriverManager.getConnection of the file src/main/java/org/spiderflow/controller/DataSourceController.jav…

  33. 5.5CVE-2023-32665EPSS 0.4%

    A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.

  34. 7.5CVE-2023-32636EPSS 0.8%

    A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does n…

  35. 9.8CVE-2023-38204EPSS 67%

    Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does…

  36. 8.1CVE-2023-38155EPSS 1.3%

    Azure DevOps Server Remote Code Execution Vulnerability

  37. 5.7CVE-2023-36777EPSS 52%

    Microsoft Exchange Server Information Disclosure Vulnerability

  38. 8.0CVE-2023-36757EPSS 37%

    Microsoft Exchange Server Spoofing Vulnerability

  39. 8.0CVE-2023-36756EPSS 49%

    Microsoft Exchange Server Remote Code Execution Vulnerability

  40. 8.0CVE-2023-36745EPSS 76%

    Microsoft Exchange Server Remote Code Execution Vulnerability

  41. 8.0CVE-2023-36744EPSS 57%

    Microsoft Exchange Server Remote Code Execution Vulnerability

  42. 4.4CVE-2023-36736EPSS 1.4%

    Microsoft Identity Linux Broker Remote Code Execution Vulnerability

  43. 7.8CVE-2023-35669EPSS 0.1%

    In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to control other running activities due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution priv…

  44. 8.8CVE-2022-1415EPSS 1.0%

    A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data. This flaw allows an authenticated attacker to construct malicious serialized objects (usually called gadgets) and achieve cod…

  45. 9.8CVE-2020-19559EPSS 1.4%

    An issue in Diebold Aglis XFS for Opteva v.4.1.61.1 allows a remote attacker to execute arbitrary code via a crafted payload to the ResolveMethod() parameter.

  46. 7.2CVE-2023-4528EPSS 32%

    Unsafe deserialization in JSCAPE MFT Server versions prior to 2023.1.9 (Windows, Linux, and MacOS) permits an attacker to run arbitrary Java code (including OS commands) via its management interface

  47. 9.8CVE-2023-41330EPSS 2.3%

    knplabs/knp-snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. ## Issue On March 17th the vulnerability CVE-2023-28115 was disclosed, allowing an attacker to gain remote code execution throug…

  48. 9.8CVE-2023-0925EPSS 0.8%

    Version 10.11 of webMethods OneData runs an embedded instance of Azul Zulu Java 11.0.15 which hosts a Java RMI registry (listening on TCP port 2099 by default) and two RMI interfaces (listening on a single, dynamically assigned TCP high po…

  49. 6.6CVE-2023-37941ExploitEPSS 35%

    If an attacker gains write access to the Apache Superset metadata database, they could persist a specifically crafted Python object that may lead to remote code execution on Superset's web backend. The Superset metadata db is an 'internal…

  50. 4.3CVE-2023-30534ExploitEPSS 2.9%

    Cacti is an open source operational monitoring and fault management framework. There are two instances of insecure deserialization in Cacti version 1.2.24. While a viable gadget chain exists in Cacti’s vendor directory (phpseclib), the nec…