{"uuid": "bbcc4906-c490-43ff-a18c-ca68c5debe03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22399", "type": "seen", "source": "https://t.me/cvedetector/5719", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22399 - Apache Seata Deserialization of Untrusted Data RCE\", \n  \"Content\": \"CVE ID : CVE-2024-22399 \nPublished : Sept. 16, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : Deserialization of Untrusted Data vulnerability in Apache Seata.\u00a0  \n  \nWhen developers disable authentication on the Seata-Server and do not use the Seata client SDK dependencies, they may construct uncontrolled serialized malicious requests by directly sending bytecode based on the Seata private protocol.  \n  \nThis issue affects Apache Seata: 2.0.0, from 1.0.0 through 1.8.0.  \n  \nUsers are recommended to upgrade to version 2.1.0/1.8.1, which fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-16T15:21:30.000000Z"}