PT-2021-6080 · Apache+1 · Apache Chainsaw+1

Kingkk · Published 2021-06-16 · Updated 2026-05-22 · CVE-2020-9493

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache Chainsaw versions prior to 2.1.0

Description The issue is related to a deserialization flaw in the software, which could allow a remote attacker to execute arbitrary code.

Recommendations For Apache Chainsaw versions prior to 2.1.0, update to version 2.1.0 or later to resolve the issue.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2022-00717

CVE-2020-9493

ROSA-SA-2024-2519

Affected Products

Apache Chainsaw

Jira

References · 14

• https://nvd.nist.gov/vuln/detail/CVE-2020-9493 · Security Note
• https://osv.dev/vulnerability/CVE-2020-9493 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-00717 · Security Note
• https://lists.apache.org/thread.html/r50d389c613ba6062a26aa57e163c09bfee4ff2d95d67331d75265b83%40%3Cannounce.apache.org%3E · Note
• https://lists.apache.org/thread.html/r50d389c613ba6062a26aa57e163c09bfee4ff2d95d67331d75265b83@%3Cannounce.apache.org%3E · Note
• https://t.me/cvenotify/16433 · Telegram Post
• https://t.me/cveNotify/164567 · Telegram Post
• https://openwall.com/lists/oss-security/2021/06/16/1 · Note
• http://openwall.com/lists/oss-security/2021/06/16/1 · Note
• https://abf.rosa.ru/advisories/ROSA-SA-2024-2519 · Note
• https://t.me/cibsecurity/35703 · Telegram Post
• http://openwall.com/lists/oss-security/2022/01/18/5 · Note
• https://t.me/cvenotify/25601 · Telegram Post
• https://t.me/cibsecurity/25477 · Telegram Post