VYPR
← All advisories
Critical severityNVD Advisory· Published Jul 25, 2019· Updated Aug 5, 2024

CVE-2018-11779

CVE-2018-11779

Description

In Apache Storm versions 1.1.0 to 1.2.2, when the user is using the storm-kafka-client or storm-kafka modules, it is possible to cause the Storm UI daemon to deserialize user provided bytes into a Java class.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.apache.storm:storm-kafkaMaven
>= 1.1.0, < 1.2.31.2.3
org.apache.storm:storm-kafka-clientMaven
>= 1.1.0, < 1.2.31.2.3

Affected products

176

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.