CVE-2019-25057

Summary

In Corda before 4.1, the meaning of serialized data can be modified via an attacker-controlled CustomSerializer.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://docs.r3.com/en/platform/corda/4.1/open-source/release-notes.html

References

• https://docs.r3.com/en/platform/corda/4.1/open-source/release-notes.html

• ←Previous
• Next→