high7.5
CVE-2019-25057
In Corda before 4.1, the meaning of serialized data can be modified via an attacker-controlled CustomSerializer.
Impact
In Corda before 4.1, the meaning of serialized data can be modified via an attacker-controlled CustomSerializer.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| R3 | Corda | before 4.1 |