how to fix CVE-2024-22399 #7552
-
|
It seems that there is a hessian serialization Vulnerabilities in seata : however we are using low version of seata (eg. seata 1.4.2), it's not easy to upgrade to version 1.8.1 which means a lot of tests should do. We wonder if there are any solution of configuration to fix CVE-2024-22399 ? For example to disable hessian and to use kyro as serialization |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment
-
|
You can remove the related dependencies directly from the 1.4.2 server, as long as you ensure Kryo and Hessian serialization are not used. |
Beta Was this translation helpful? Give feedback.
You can remove the related dependencies directly from the 1.4.2 server, as long as you ensure Kryo and Hessian serialization are not used.