https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 21:20:15 +0000 https://cve.radiocsirt.org/vuln/cve-2024-47552 <p><strong>Affected:</strong> Apache Software Foundation Apache Seata (incubating)</p> <p>Deserialization of Untrusted Data vulnerability in Apache Seata (incubating).</p> <p>This issue affects Apache Seata (incubating): from 2.0.0 before 2.2.0.</p> <p>Severity Justification:</p> <p>The Apache Seata security team assesses the severity of this vulnerability as &#34;Low&#34; due to stringent real-world mitigating factors. First, the vulnerability is strictly isolated to the Raft cluster mode, an optional and non-default feature introduced in v2.0.0, while most users rely on the unaffected traditional architecture. Second, Seata is an internal middleware; communication between TC and RM/TM occurs entirely within trusted internal networks. An attacker would require prior, unauthorized access to the Intranet to exploit this, making external exploitation highly improbable.</p> <p>Users are recommended to upgrade to version 2.2.0, which fixes the issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Seata (incubating)</p> <p>Deserialization of Untrusted Data vulnerability in Apache Seata (incubating).</p> <p>This issue affects Apache Seata (incubating): from 2.0.0 before 2.2.0.</p> <p>Severity Justification:</p> <p>The Apache Seata security team assesses the severity of this vulnerability as &#34;Low&#34; due to stringent real-world mitigating factors. First, the vulnerability is strictly isolated to the Raft cluster mode, an optional and non-default feature introduced in v2.0.0, while most users rely on the unaffected traditional architecture. Second, Seata is an internal middleware; communication between TC and RM/TM occurs entirely within trusted internal networks. An attacker would require prior, unauthorized access to the Intranet to exploit this, making external exploitation highly improbable.</p> <p>Users are recommended to upgrade to version 2.2.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/cve-2024-47552