Description (CNA)
Deserialization of Untrusted Data vulnerability of Apache ShardingSphere-UI allows an attacker to inject outer link resources. This issue affects Apache ShardingSphere-UI Apache ShardingSphere-UI version 4.1.1 and later versions; Apache ShardingSphere-UI versions prior to 5.0.0.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apache Software Foundation / Apache ShardingSphere-UI | affected 4.1.1 before Apache ShardingSphere-UI* |
CWE
CWE-502
References
- https://lists.apache.org/thread/4gzkm1zb6c97v9gl8lcz8ll5xr8o484c
- http://www.openwall.com/lists/oss-security/2021/11/11/1
ADP enrichment
No English description supplied.