← CVE Intelligence

CVE-2018-6331

Facebook / Buck PUBLISHED

Description (CNA)

Buck parser-cache command loads/saves state using Java serialized object. If the state information is maliciously crafted, deserializing it could lead to code execution. This issue affects Buck versions prior to v2018.06.25.01.

Affected (CNA)

Vendor / productVersions
Facebook / Buckaffected v2018.06.25.01; affected unspecified through v2018.06.25.01

CWE

CWE-502

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.