Red Hat Security Advisory

RHSA-2024:10933

Red Hat JBoss Enterprise Application Platform 7.4.20 Security update

Released 2024-12-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform io.undertow.undertow-core-2.2.37.SP2-redhat-00001.jar, org.apache.avro.avro-1.11.4.redhat-00001.jar

TI-2024-31848 CVE-2024-47561 · GHSA-r7pg-v2c8-mfg3

MEDIUM 47

Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.03256 Published 2024-10-03 Partial fix · 1.11.4 CWE-502