CVE-2021-26558

CVE-2021-26558: Deserialization of Untrusted Data

Vendor Apache Software Foundation

Product Apache ShardingSphere-UI

Weakness CWE-502 · Unsafe deserialization

Published November 11, 2021

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Deserialization of Untrusted Data vulnerability of Apache ShardingSphere-UI allows an attacker to inject outer link resources. This issue affects Apache ShardingSphere-UI Apache ShardingSphere-UI version 4.1.1 and later versions; Apache ShardingSphere-UI versions prior to 5.0.0.

Key dates

02Disclosure timeline

November 11, 2021 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-26558 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/502.html

Related vulnerabilities

04Related CVE

CVE-2023-24971 IBM B2B Advanced Communication denial of service CVE-2025-25034 SugarCRM PHP Deserialization RCE CVE-2025-62233 Apache DolphinScheduler: Deserialization of untrusted data in RPC CVE-2026-49770 WordPress WP Travel Engine plugin <= 6.7.12 - PHP Object Injection vulnerability CVE-2024-32600 WordPress Master Slider plugin <= 3.9.5 - PHP Object Injection vulnerability