Vulnerabilities in GraniteDS

2 results

CVE-2017-3200—The implementation of Action Message Format (AMF3) deserializers in GraniteDS, version 3.1.1.GA, may allow instantiation of arbitrary classes due to improper code controlEPSS 6.1%CVE-2017-3199—GraniteDS, version 3.1.1.GA, Action Message Format (AMF3) Java implementation is vulnerable to insecure deserializationEPSS 6.1%