Antfin Sofa-hessian
2 CVEs affecting Antfin Sofa-hessian. Latest disclosed: 2024-09-19. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-46983 | Critical | 9.8 | 2024-09-19 | sofa-hessian is an internal improved version of Hessian3/4 powered by Ant Group CO., Ltd. The SOFA Hessian protocol uses a blacklist mechanism to restrict dese… |
CVE-2019-9212 | Critical | 9.8 | 2019-02-27 | SOFA-Hessian through 4.0.2 allows remote attackers to execute arbitrary commands via a crafted serialized Hessian object because blacklisting of com.caucho.nam… |