Uploaded image for project: 'Ambari'
  1. Ambari
  2. AMBARI-25787

Upgrade GSON to 2.9.0 to resolve CVEs

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 2.8.0
    • None
    • None

    Description

      CVE-2022-25647:

      The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.

      Attachments

        Issue Links

          links to

          GitHub PR#3604 GitHub PR#3604

          Activity

            People

              skumar34 Sandeep Kumar
              skumar34 Sandeep Kumar
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 1h
                  1h