org.apache.ddlutils vulnerabilities

Products

• org.apache.ddlutils/ddlutils 1

Latest org.apache.ddlutils CVEs

Newest publication first

1. CVE-2021-41616 Deserialization of Untrusted Data in org.apache.ddlutils:ddlutils

   Critical·CVSS 9.8 EPSS 3.5%

   Apache DB DdlUtils 1.0 included a BinaryObjectsHelper that was intended for use when migrating database data with a SQL data type of BINARY, VARBINARY, LONGVARBINARY, or BLOB between databases using the ddlutils features. The BinaryObjectsHelper class was insecure and used Object...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.