Skip to contentExadel Flamingo Amf-serializer vulnerabilities
- exadel flamingo, flamingo amf-serializer +1 moreThe Action Message Format (AMF3) deserializers used by Flamingo amf-serializer by Exadel, version 2.2.0, allows external entity references (XXEs) from XML documents embedded within AMF3 messagesCVE-2017-32069.8 Critical
- exadel flamingo, flamingo amf-serializer +1 moreThe implementation of Action Message Format (AMF3) deserializers in Flamingo amf-serializer by Exadel, version 2.2.0, may allow instantiation of arbitrary classes due to improper code controlCVE-2017-32029.8 Critical
- exadel flamingo amf-serializerFlamingo amf-serializer by Exadel, version 2.2.0, Action Message Format (AMF3) Java implementation is vulnerable to insecure deserializationCVE-2017-32018.1 High