Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Flamingo amf-serializer — Vulnerabilities & Security Advisories 3

All 3 CVE vulnerabilities found in Flamingo amf-serializer, with AI-generated Chinese analysis, references, and POCs.

Vendor: Exadel

CVE IDTitleCVSSSeverityPublished
CVE-2017-3201 Flamingo amf-serializer by Exadel, version 2.2.0, Action Message Format (AMF3) Java implementation is vulnerable to insecure deserialization CWE-502 8.1 -2018-06-11
CVE-2017-3202 The implementation of Action Message Format (AMF3) deserializers in Flamingo amf-serializer by Exadel, version 2.2.0, may allow instantiation of arbitrary classes due to improper code control CWE-913 9.8 -2018-06-11
CVE-2017-3206 The Action Message Format (AMF3) deserializers used by Flamingo amf-serializer by Exadel, version 2.2.0, allows external entity references (XXEs) from XML documents embedded within AMF3 messages CWE-611 9.8 -2018-06-11

All 3 known CVE vulnerabilities affecting Flamingo amf-serializer with full Chinese analysis, references, and POCs where available.