CVE-2014-9515 Dozer improperly uses a reflection-based approach to type conversion, which might allow remote attackers to execute arbitrary code via a crafted serialized object.
CriticalCVSS 9.8
EPSS 5.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Dozer improperly uses a reflection-based approach to type conversion, which might allow remote attackers to execute arbitrary code via a crafted serialized object.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dozer project dozer | <= 5.5.1 | No fix listed |
References
- 107970 vdb-entry
- github.com issue-tracking third-party-advisory
- github.com
- github.com
- github.com
- github.com issue-tracking third-party-advisory
- infocon.org issue-tracking third-party-advisory
- security.netapp.com
- www.oracle.com