Maven package intelligence

ro.pippo:pippo-fastjson Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting the Maven package ro.pippo:pippo-fastjson, including the gap beyond CISA KEV, confidence assessments, and sensor observations.

Total KEVs
1
Known exploited vulnerability affecting ro.pippo:pippo-fastjson
In CISA KEV
0
Records also listed in the official catalog
Beyond CISA KEV
1
Additional exploited vulnerabilities absent from CISA KEV
Sensor Observed
0
ro.pippo:pippo-fastjson KEVs with sensor-observed exploitation activity

Review ro.pippo:pippo-fastjson exploitation against the versions you run

One of the one exploited ro.pippo:pippo-fastjson vulnerabilities tracked here are not in CISA KEV.

0%
Covered by CISA
100%
Beyond CISA

Attested ro.pippo:pippo-fastjson vulnerabilities

1 known exploited vulnerability affecting this package.

Vulnerability CISA KEV Added
CVE-2017-18349

parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary...

Beyond CISA 23 Oct 2018

Recurring weakness patterns

Improper Input Validation account for mapped occurrences across this ro.pippo:pippo-fastjson KEV portfolio.

Browse all KEVs →