CVE-2017-20189

First published: Mon Jan 22 2024(Updated: )

Clojure could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially crafted serialized object, an attacker could exploit this vulnerability to execute arbitrary code on the system.

Credit: cve@mitre.org cve@mitre.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/first-publish-date
• agent/type
• agent/weakness
• agent/author
• agent/remedy
• collector/nvd-api
• source/NVD
• agent/software-canonical-lookup
• agent/software-canonical-lookup-request
• collector/github-advisory-latest
• source/GitHub
• alias/GHSA-jgxc-8mwq-9xqw
• alias/CVE-2017-20189
• collector/nvd-cve
• agent/event
• collector/github-advisory
• collector/ibm-support
• source/IBM
• agent/references
• agent/severity
• agent/tags
• agent/description
• agent/softwarecombine
• collector/mitre-cve
• source/MITRE
• agent/last-modified-date
• agent/trending
• vendor/clojure
• canonical/clojure clojure
• package-manager/maven
• vendor/ibm
• canonical/ibm cognos analytics
• version/ibm cognos analytics/12.0.0-12.0.2
• version/ibm cognos analytics/11.2.0-11.2.4 fp3