« List of all CVEs

CVE-2016-5397

Published: 2/12/2018 Last updated: 9/16/2024 Reserved: 6/10/2016

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0.

CNA assigner: apache (f0158376-9dc2-43b6-827c-5f631a4d8d09) Requested by: n/a

Opam packages affected (1)

thrift

Products affected (1)

Product Vendor Version
Apache Thrift Apache Software Foundation n/a

References (12)