Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-40865

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-w729-7633-2fw5

Deserialization of Untrusted Data leading to Remote Code Execution in Apache Storm An Unsafe Deserialization vulnerability exists in the worker services of the Apache Storm supervisor server allowing pre-auth Remote Code Execution (RCE). Apache Storm 2.2.x users should upgrade to version 2.2.1 or 2.3.0. Apache Storm 2.1.x users should upgrade to version 2.1.1. Apache Storm 1.x users should upgrade to version 1.2.4

gitlab/maven/org.apache.storm/storm/CVE-2021-40865

Deserialization of Untrusted Data An Unsafe Deserialization vulnerability exists in the worker services of the Apache Storm supervisor server allowing pre-auth Remote Code Execution (RCE). Apache Storm 2.2.x users should upgrade to version 2.2.1 or 2.3.0. Apache Storm 2.1.x users should upgrade to version 2.1.1. Apache Storm 1.x users should upgrade to version 1.2.4

gitlab/maven/org.apache.storm/storm-server/CVE-2021-40865

Deserialization of Untrusted Data An Unsafe Deserialization vulnerability exists in the worker services of the Apache Storm supervisor server allowing pre-auth Remote Code Execution (RCE).