writeups.xyz / CVE-2022-21404: Another Story Of Developers Fixing Vulnerabilities Unknowingly Because Of CodeQL

Submitter : c2a

Date: 19 May 2022

Bounty : undisclosed

Vulnerabilities :

• Insecure Deserialization

Programs :

• Oracle

Authors :

• Paulino Calderon (@Calderpwn)

Link :
https://www.websec.ca/publication/Blog/CVE-2022-21404-Another-story-of-developers-fixing-vulnerabilities-unknowingly-because-of-CodeQL