Advisories · Technology
Exadel Flamingo amf-serializer.
Every CVE that names Exadel Flamingo amf-serializer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
The Action Message Format (AMF3) deserializers used by Flamingo amf-serializer by Exadel, version 2.2.0, allows external entity references (XXEs) from XML documents embedded within AMF3 messages
- Exadel Flamingo amf-serializer
- XML external entities (XXE)
-
Flamingo amf-serializer by Exadel, version 2.2.0, Action Message Format (AMF3) Java implementation is vulnerable to insecure deserialization
- Exadel Flamingo amf-serializer
- Insecure deserialization