Skip to content
Exadel Flamingo vulnerabilities
-
exadel flamingo, flamingo amf-serializer +1 more
The Action Message Format (AMF3) deserializers used by Flamingo amf-serializer by Exadel, version 2.2.0, allows external entity references (XXEs) from XML documents embedded within AMF3 messages
CVE-2017-3206
9.8 Critical
-
exadel flamingo, flamingo amf-serializer +1 more
The implementation of Action Message Format (AMF3) deserializers in Flamingo amf-serializer by Exadel, version 2.2.0, may allow instantiation of arbitrary classes due to improper code control
CVE-2017-3202
9.8 Critical
-
exadel flamingo amf-serializer
Flamingo amf-serializer by Exadel, version 2.2.0, Action Message Format (AMF3) Java implementation is vulnerable to insecure deserialization
CVE-2017-3201
8.1 High