TI-2017-08941 CVE-2017-12149 · GHSA-j5r3-wq62-8gp5
Deserialization of untrusted data in Red Hat jbossas
Priority CRITICAL 100KEV
In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it perfor…