CVE-2021-33207

The HTTP client in MashZone NextGen through 10.7 GA deserializes untrusted data when it gets an HTTP response with a 570 status code.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-04-05

Last modified

2024-08-03

Weaknesses

CWE-502

Affected products

• Mashzone Nextgen (Softwareag)

References

• https://github.com/blackarrowsec/advisories/tree/master/2021/CVE-2021-33207
• https://www.softwareag.com/corporate/products/az/mashzone_nextgen/default