- Description
- Deserialization of Untrusted Data vulnerability in Apache Seata (incubating). This issue affects Apache Seata (incubating): 2.4.0. Users are recommended to upgrade to version 2.5.0, which fixes the issue.
- Source
- security@apache.org
- NVD status
- Analyzed
- Products
- seata
CVSS 3.1
- Type
- Secondary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
- security@apache.org
- CWE-502
- Hype score
- Not currently trending
CVE-2025-53606 (CVSS:9.8, CRITICAL) is Analyzed. Deserialization of Untrusted Data vulnerability in Apache Seata (incubating). This issue affects Apache Seata (incubati..https://t.co/q9yJ5XhoN6 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
@cracbot
13 Aug 2025
8 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 CRITICAL: Apache Seata 2.4.0 hit by deserialization flaw (CVE-2025-53606) — attackers could execute arbitrary code! Upgrade to 2.5.0 ASAP. Protect your distributed transactions. Details: https://t.co/vtWpmiauZ9... https://t.co/ug1y9X2uGX
@offseq
8 Aug 2025
56 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-53606 Deserialization of Untrusted Data vulnerability in Apache Seata (incubating). This issue affects Apache Seata (incubating): 2.4.0. Users are recommended to upgrade … https://t.co/wNNKtI0N1m
@CVEnew
8 Aug 2025
444 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-53606 CVE-2025-53606 https://t.co/D27trpelm7
@VulmonFeeds
7 Aug 2025
15 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-53606: Apache Seata (incubating): Deserialization of untrusted Data in Apache Seata Server https://t.co/GFJJNRjjf7
@oss_security
7 Aug 2025
265 Impressions
0 Retweets
2 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apache:seata:2.4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "5C3044E1-411F-43ED-8FFE-B55D6D3F61EF",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]