CVE-2021-33207
CRITICALMashZone NextGen <10.7 - Deserialization
Title source: llmDescription
The HTTP client in MashZone NextGen through 10.7 GA deserializes untrusted data when it gets an HTTP response with a 570 status code.
Scores
CVSS v3
9.8
EPSS
0.0278
EPSS Percentile
85.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-502
Status
published
Affected Products (1)
softwareag/mashzone_nextgen
< 10.7
Timeline
Published
Apr 05, 2022
Tracked Since
Feb 18, 2026