R3: Security Vulnerabilities
In Corda before 4.1, the meaning of serialized data can be modified via an attacker-controlled CustomSerializer.
CVSS Score
7.5
EPSS Score
0.002
Published
2022-02-14