CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.3. It affects Apache, Java.
CVE
CVE-2025-33042
Severity
HIGH
CVSS
7.3
EPSS
0.60%
Apache Java
Original NVD Description
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas. This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0. Users are recommended to upgrade to version 1.12.1 or 1.11.5, which fix the issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)