Lucene search
Veracode Vulnerability DatabaseVERACODE:45700HistoryFeb 29, 2024 - 8:00 a.m.
Deserialization Of Untrusted Data
2024-02-2908:00:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
org.apache.james
deserialization
untrusted data
jmx endpoint
vulnerability
privilege escalation
remote code execution
software
org.apache.james: james-server is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to a JMX endpoint being exposed on localhost, allowing exploitation with a deserialization gadget, potentially resulting in privilege escalation or remote code execution.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache james :: server | eq | 3.8.0 | |
| apache james :: server | le | 3.7.4 | |
| apache james :: server | eq | 3.8.0 | |
| apache james :: server | le | 3.7.4 |
Related
github
github
cvelist
cvelist
nvd
nvd
CVE-2023-51518
2024-02-27 09:15:36
osv
osv
prion
prion
Authentication flaw
2024-02-27 09:15:00
cve
cve
CVE-2023-51518
2024-02-27 09:15:36