{"vulnerability": "cve-2024-4756", "sightings": [{"uuid": "ecdbdda7-6816-41bc-a31c-4c17db576770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47562", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-06", "content": "", "creation_timestamp": "2024-10-10T12:00:00.000000Z"}, {"uuid": "50e53205-101f-4649-ac45-7c5fb7d17a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47563", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-06", "content": "", "creation_timestamp": "2024-10-10T12:00:00.000000Z"}, {"uuid": "5ddfa728-5be6-4d73-80a3-693eda665843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47565", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-06", "content": "", "creation_timestamp": "2024-10-10T12:00:00.000000Z"}, {"uuid": "e1556ea3-ddbc-464f-b8d8-150a4c9e91c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47566", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgwlc2hf2f", "content": "", "creation_timestamp": "2025-01-14T14:17:38.022503Z"}, {"uuid": "9a8d3d5a-606c-4426-94bf-7f322cd24e6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47566", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827532350823639", "content": "", "creation_timestamp": "2025-01-14T15:58:26.135976Z"}, {"uuid": "28452f01-ae56-45d3-b78d-230490d2014d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113869714895593544", "content": "", "creation_timestamp": "2025-01-22T02:46:01.199945Z"}, {"uuid": "e0bf5e7e-4ec6-497d-9cb8-ea7fbe3f5fcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47566", "type": "seen", "source": "https://t.me/cvedetector/15264", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47566 - Fortinet FortiRecorder Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47566 \nPublished : Jan. 14, 2025, 2:15 p.m. | 21\u00a0minutes ago \nDescription : A improper limitation of a pathname to a restricted directory ('path traversal') [CWE-23] in Fortinet FortiRecorder version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to delete files from the underlying filesystem via crafted CLI requests. \nSeverity: 5.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T15:39:52.000000Z"}, {"uuid": "d7fae363-4241-4f3b-9730-d5b682be8e46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47566", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1623", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-47566\n\ud83d\udd39 Description: A improper limitation of a pathname to a restricted directory ('path traversal') [CWE-23] in Fortinet FortiRecorder version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to delete files from the underlying filesystem via crafted CLI requests.\n\ud83d\udccf Published: 2025-01-14T14:09:35.726Z\n\ud83d\udccf Modified: 2025-01-14T20:54:34.253Z\n\ud83d\udd17 References:\n1. https://fortiguard.fortinet.com/psirt/FG-IR-24-401", "creation_timestamp": "2025-01-14T21:12:00.000000Z"}, {"uuid": "7b4a2a33-c50e-4b7c-9b89-5ec6c4e61433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/ton618cyber/1766", "content": "Critical Apache Avro SDK Flaw Allows Remote Code Execution in Java Applications\n\nUrgent patch advised for Apache Avro Java SDK flaw (CVE-2024-47561) that allows code execution.\n\nthehackernews.com \u2022 Oct 7, 2024", "creation_timestamp": "2024-10-08T15:45:01.000000Z"}, {"uuid": "a0ec2631-c44a-4bd9-a959-28fde7053440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47565", "type": "seen", "source": "https://t.me/cvedetector/7336", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47565 - Siemens SINEC Security Monitor Input Validation Denial of Configuration Integrity Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47565 \nPublished : Oct. 8, 2024, 9:15 a.m. | 42\u00a0minutes ago \nDescription : A vulnerability has been identified in Siemens SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate that user input complies with a list of allowed values.  \nThis could allow an authenticated remote attacker to compromise the integrity of the configuration of the affected application. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T12:02:10.000000Z"}, {"uuid": "66083b07-1ae5-4d82-8a15-a476eb7a6a12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47563", "type": "seen", "source": "https://t.me/cvedetector/7335", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47563 - Siemens SINEC Security Monitor File Path Validation Vulnerability (Path Traversal)\", \n  \"Content\": \"CVE ID : CVE-2024-47563 \nPublished : Oct. 8, 2024, 9:15 a.m. | 42\u00a0minutes ago \nDescription : A vulnerability has been identified in Siemens SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate a file path that is supplied to an endpoint intended to create CSR files.  \nThis could allow an unauthenticated remote attacker to create files in writable directories outside the intended location and thus compromise integrity of files in those writable directories. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T12:02:09.000000Z"}, {"uuid": "15d6fb1a-f6f3-408f-a753-0e89aeb0f10a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47562", "type": "seen", "source": "https://t.me/cvedetector/7334", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47562 - Siemens SINEC Security Monitor Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47562 \nPublished : Oct. 8, 2024, 9:15 a.m. | 42\u00a0minutes ago \nDescription : A vulnerability has been identified in Siemens SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly neutralize special elements in user input to the ```ssmctl-client``` command.  \nThis could allow an authenticated, lowly privileged local attacker to execute privileged commands in the underlying OS. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T12:02:08.000000Z"}, {"uuid": "7eaa0b7a-1883-42bb-90a1-8b2676a105fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/cvedetector/6892", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47561 - Apache Avro Java SDK Arbitrary Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47561 \nPublished : Oct. 3, 2024, 11:15 a.m. | 42\u00a0minutes ago \nDescription : Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code.  \nUsers are recommended to upgrade to version 1.11.4\u00a0 or 1.12.0, which fix this issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-03T14:06:25.000000Z"}, {"uuid": "dd655a3b-d1de-4efd-8243-c1f41c07cfd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47560", "type": "seen", "source": "https://t.me/cvedetector/6693", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47560 - RevoWorks Cloud Client Unrestricted Sandbox Execution\", \n  \"Content\": \"CVE ID : CVE-2024-47560 \nPublished : Oct. 1, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : RevoWorks Cloud Client 3.0.91 and earlier contains an incorrect authorization vulnerability. If this vulnerability is exploited, unintended processes may be executed in the sandbox environment. Even if malware is executed in the sandbox environment, it does not compromise the client's local environment. However, information in the sandbox environment may be disclosed to outside or behaviors of the sandbox environment may be violated by tampering registry. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T05:12:30.000000Z"}, {"uuid": "096aca50-e9db-423a-a189-713ef612b76b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/CyberBulletin/1024", "content": "\u26a1\ufe0fCVE-2024-47561: Critical Flaw in Apache Avro Java SDK Allows Arbitrary Code Execution.\n\n#CyberBulletin", "creation_timestamp": "2024-10-04T14:13:07.000000Z"}, {"uuid": "a092b566-c1ee-4a47-80e7-af082c77587a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47561", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/1828", "content": "#news\n\nhttps://github.com/advisories/GHSA-r7pg-v2c8-mfg3\nA critical vulnerability, CVE-2024-47561, has been identified in the Apache Avro Java SDK, affecting all versions up to and including 1.11.3. This vulnerability allows an attacker to execute arbitrary code on systems parsing Avro data via a specially crafted schema. The root of the issue lies in the deserialization of untrusted data, a common flaw that can lead to remote code execution (RCE). This flaw could be exploited if an application processes malicious Avro schemas, potentially compromising the system entirely.\n\nThe vulnerability was discovered by Kostya Kortchinsky from the Databricks Security Team. Exploits could be launched through frameworks like Kafka or other data pipeline technologies relying on Avro schemas. Although no public proof-of-concept (PoC) has been released yet, this vulnerability poses a serious threat, especially to systems that allow users to upload or provide their own Avro schemas for parsing.\n\nMitigation steps include upgrading to version 1.11.4 or later, which patches the vulnerability, as well as employing schema sanitization and avoiding user-provided schemas wherever possible. It's essential that organizations prioritize patching to avoid security risks", "creation_timestamp": "2024-10-08T16:18:58.000000Z"}, {"uuid": "e4bb15fb-2152-42fc-8236-00a0c9827e44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47560", "type": "seen", "source": "https://t.me/HackerArsenal/516", "content": "\u203c\ufe0f CVE-2024-47560 \u203c\ufe0f\n\nRevoWorks Cloud Client 3.0.91 and earlier contains an incorrect authorization vulnerability. If this vulnerability is exploited, unintended processes may be executed in the sandbox environment. Even if malware is executed in the sandbox environment, it does not compromise the client's local environment. However, information in the sandbox environment may be disclosed to outside or behaviors of the sandbox environment may be violated by tampering registry.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"National Vulnerability Database\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity_CVEs", "creation_timestamp": "2024-10-01T05:55:46.000000Z"}, {"uuid": "206ebd7a-cc87-4518-a81c-938363fef888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "Telegram/skEHCfJ_x5c-yP0mkJ7VZM_AJhkEuRmn3wUzz8p1zomZBA", "content": "", "creation_timestamp": "2024-10-07T18:07:34.000000Z"}, {"uuid": "6a80b394-6bb2-4637-b98a-3850a956708b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/ton618cyber/5297", "content": "#news\n\nhttps://github.com/advisories/GHSA-r7pg-v2c8-mfg3\nA critical vulnerability, CVE-2024-47561, has been identified in the Apache Avro Java SDK, affecting all versions up to and including 1.11.3. This vulnerability allows an attacker to execute arbitrary code on systems parsing Avro data via a specially crafted schema. The root of the issue lies in the deserialization of untrusted data, a common flaw that can lead to remote code execution (RCE). This flaw could be exploited if an application processes malicious Avro schemas, potentially compromising the system entirely.\n\nThe vulnerability was discovered by Kostya Kortchinsky from the Databricks Security Team. Exploits could be launched through frameworks like Kafka or other data pipeline technologies relying on Avro schemas. Although no public proof-of-concept (PoC) has been released yet, this vulnerability poses a serious threat, especially to systems that allow users to upload or provide their own Avro schemas for parsing.\n\nMitigation steps include upgrading to version 1.11.4 or later, which patches the vulnerability, as well as employing schema sanitization and avoiding user-provided schemas wherever possible. It's essential that organizations prioritize patching to avoid security risks", "creation_timestamp": "2024-10-08T16:18:57.000000Z"}, {"uuid": "e334b34f-e503-4c52-b3c6-24b140e298bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/ton618cyber/5228", "content": "Critical Apache Avro SDK Flaw Allows Remote Code Execution in Java Applications\n\nUrgent patch advised for Apache Avro Java SDK flaw (CVE-2024-47561) that allows code execution.\n\nthehackernews.com \u2022 Oct 7, 2024", "creation_timestamp": "2024-10-08T15:44:59.000000Z"}, {"uuid": "e5b13613-59e4-4254-bd8d-b68441779780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47561", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/15215", "content": "\u200aCVE-2024-47561: Critical Flaw in Apache Avro Java SDK Allows Arbitrary Code Execution\n\nhttps://securityonline.info/cve-2024-47561-critical-flaw-in-apache-avro-java-sdk-allows-arbitrary-code-execution/", "creation_timestamp": "2024-10-05T17:00:36.000000Z"}, {"uuid": "ab227ce0-f82d-4ad7-9da8-aa9e11bf0a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47561", "type": "published-proof-of-concept", "source": "https://t.me/leaksmain/291", "content": "#news\n\nhttps://github.com/advisories/GHSA-r7pg-v2c8-mfg3\nA critical vulnerability, CVE-2024-47561, has been identified in the Apache Avro Java SDK, affecting all versions up to and including 1.11.3. This vulnerability allows an attacker to execute arbitrary code on systems parsing Avro data via a specially crafted schema. The root of the issue lies in the deserialization of untrusted data, a common flaw that can lead to remote code execution (RCE). This flaw could be exploited if an application processes malicious Avro schemas, potentially compromising the system entirely.\n\nThe vulnerability was discovered by Kostya Kortchinsky from the Databricks Security Team. Exploits could be launched through frameworks like Kafka or other data pipeline technologies relying on Avro schemas. Although no public proof-of-concept (PoC) has been released yet, this vulnerability poses a serious threat, especially to systems that allow users to upload or provide their own Avro schemas for parsing.\n\nMitigation steps include upgrading to version 1.11.4 or later, which patches the vulnerability, as well as employing schema sanitization and avoiding user-provided schemas wherever possible. It's essential that organizations prioritize patching to avoid security risks", "creation_timestamp": "2024-10-08T01:05:26.000000Z"}, {"uuid": "685684ea-0ca1-419e-a833-0dd027459e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/23093", "content": "The Hacker News\nCritical Apache Avro SDK Flaw Allows Remote Code Execution in Java Applications\n\nA critical security flaw has been disclosed in the Apache Avro Java Software Development Kit (SDK) that, if successfully exploited, could allow the execution of arbitrary code on susceptible instances.\nThe flaw, tracked as CVE-2024-47561, impacts all versions of the software prior to 1.11.4.\n\"Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute", "creation_timestamp": "2024-10-07T18:07:18.000000Z"}, {"uuid": "8a386509-78bc-4113-bd3b-f5d7061c802c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/nodejsleaks/1031", "content": "#news\n\nhttps://github.com/advisories/GHSA-r7pg-v2c8-mfg3\nA critical vulnerability, CVE-2024-47561, has been identified in the Apache Avro Java SDK, affecting all versions up to and including 1.11.3. This vulnerability allows an attacker to execute arbitrary code on systems parsing Avro data via a specially crafted schema. The root of the issue lies in the deserialization of untrusted data, a common flaw that can lead to remote code execution (RCE). This flaw could be exploited if an application processes malicious Avro schemas, potentially compromising the system entirely.\n\nThe vulnerability was discovered by Kostya Kortchinsky from the Databricks Security Team. Exploits could be launched through frameworks like Kafka or other data pipeline technologies relying on Avro schemas. Although no public proof-of-concept (PoC) has been released yet, this vulnerability poses a serious threat, especially to systems that allow users to upload or provide their own Avro schemas for parsing.\n\nMitigation steps include upgrading to version 1.11.4 or later, which patches the vulnerability, as well as employing schema sanitization and avoiding user-provided schemas wherever possible. It's essential that organizations prioritize patching to avoid security risks", "creation_timestamp": "2024-10-08T01:05:19.000000Z"}, {"uuid": "de54b03a-0d01-44c9-a583-70f7e7639c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/5003", "content": "The Hacker News\nCritical Apache Avro SDK Flaw Allows Remote Code Execution in Java Applications\n\nA critical security flaw has been disclosed in the Apache Avro Java Software Development Kit (SDK) that, if successfully exploited, could allow the execution of arbitrary code on susceptible instances.\nThe flaw, tracked as CVE-2024-47561, impacts all versions of the software prior to 1.11.4.\n\"Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute", "creation_timestamp": "2024-10-07T18:07:18.000000Z"}, {"uuid": "304c0e18-829d-448b-ab05-a5f91b78da69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/InfoSecInsider/23996", "content": "\u26a1\ufe0fCVE-2024-47561: Critical Flaw in Apache Avro Java SDK Allows Arbitrary Code Execution.\n\n#CyberBulletin", "creation_timestamp": "2024-10-04T14:16:16.000000Z"}, {"uuid": "e7a1a846-b6b6-431f-8810-9f24f9fcaaa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/thehackernews/5694", "content": "A critical security flaw in Apache Avro SDK (CVE-2024-47561) threatens large-scale data processing systems.  \n \nEnsure your systems are patched to avoid arbitrary code execution risks. \n \nDetails here: https://thehackernews.com/2024/10/critical-apache-avro-sdk-flaw-allows.html", "creation_timestamp": "2024-10-07T11:45:20.000000Z"}, {"uuid": "de866fc5-45c9-4553-9b7f-9b629fd21863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/CyberBulletin/25919", "content": "\u26a1\ufe0fCVE-2024-47561: Critical Flaw in Apache Avro Java SDK Allows Arbitrary Code Execution.\n\n#CyberBulletin", "creation_timestamp": "2024-10-04T14:13:07.000000Z"}, {"uuid": "3297ffa1-2bde-409c-a0cc-134555994dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/InfoSecInsider/438", "content": "\u26a1\ufe0fCVE-2024-47561: Critical Flaw in Apache Avro Java SDK Allows Arbitrary Code Execution.\n\n#CyberBulletin", "creation_timestamp": "2024-10-04T14:16:23.000000Z"}, {"uuid": "a2b54a40-69ea-4791-afa5-4e1760eb0793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/ZerodayAlert/349", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Avro\n\n\u26a0\ufe0f \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-47561 \u0432 Apache Avro Java SDK, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e \u0434\u043e 1.11.4 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e. \n\n\ud83d\udd04 \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Apache Avro \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0435\u0440\u0441\u0438\u0439 1.11.4 \u0438 1.12.0 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0438\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0438 \u0440\u0430\u0437\u0431\u043e\u0440 \u0441\u0445\u0435\u043c \u043e\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \n\n\ud83d\udc68\u200d\ud83d\udcbb \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041a\u043e\u0441\u0442\u0435\u0439 \u041a\u043e\u0440\u0447\u0438\u043d\u0441\u043a\u0438\u0439 \u0438\u0437 Databricks \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \u041f\u043e\u043a\u0430 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 (PoC) \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043d\u0435\u0442, \u043e\u0434\u043d\u0430\u043a\u043e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u044b ReflectData \u0438 SpecificData, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0447\u0435\u0440\u0435\u0437 Kafka.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u043a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437\u0430 #\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 #ApacheAvro\n\n@ZerodayAlert", "creation_timestamp": "2026-07-06T11:00:04.054844Z"}, {"uuid": "898cece7-254b-49b1-a65d-f665ef9320bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/ZerodayAlert/349", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Avro\n\n\u26a0\ufe0f \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-47561 \u0432 Apache Avro Java SDK, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e \u0434\u043e 1.11.4 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e. \n\n\ud83d\udd04 \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Apache Avro \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0435\u0440\u0441\u0438\u0439 1.11.4 \u0438 1.12.0 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0438\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0438 \u0440\u0430\u0437\u0431\u043e\u0440 \u0441\u0445\u0435\u043c \u043e\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \n\n\ud83d\udc68\u200d\ud83d\udcbb \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041a\u043e\u0441\u0442\u0435\u0439 \u041a\u043e\u0440\u0447\u0438\u043d\u0441\u043a\u0438\u0439 \u0438\u0437 Databricks \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \u041f\u043e\u043a\u0430 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 (PoC) \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043d\u0435\u0442, \u043e\u0434\u043d\u0430\u043a\u043e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u044b ReflectData \u0438 SpecificData, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0447\u0435\u0440\u0435\u0437 Kafka.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u043a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437\u0430 #\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 #ApacheAvro\n\n@ZerodayAlert", "creation_timestamp": "2026-07-07T00:00:06.268470Z"}, {"uuid": "7675280e-7292-4113-aa28-d367e07eb482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/ZerodayAlert/349", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Avro\n\n\u26a0\ufe0f \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-47561 \u0432 Apache Avro Java SDK, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e \u0434\u043e 1.11.4 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e. \n\n\ud83d\udd04 \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Apache Avro \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0435\u0440\u0441\u0438\u0439 1.11.4 \u0438 1.12.0 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0438\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0438 \u0440\u0430\u0437\u0431\u043e\u0440 \u0441\u0445\u0435\u043c \u043e\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \n\n\ud83d\udc68\u200d\ud83d\udcbb \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041a\u043e\u0441\u0442\u0435\u0439 \u041a\u043e\u0440\u0447\u0438\u043d\u0441\u043a\u0438\u0439 \u0438\u0437 Databricks \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \u041f\u043e\u043a\u0430 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 (PoC) \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043d\u0435\u0442, \u043e\u0434\u043d\u0430\u043a\u043e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u044b ReflectData \u0438 SpecificData, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0447\u0435\u0440\u0435\u0437 Kafka.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u043a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437\u0430 #\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 #ApacheAvro\n\n@ZerodayAlert", "creation_timestamp": "2026-07-11T20:00:06.799417Z"}, {"uuid": "f9d5c708-1f98-40af-b662-07e7aa9e2d6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-47561", "type": "seen", "source": "https://t.me/ZerodayAlert/349", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Avro\n\n\u26a0\ufe0f \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-47561 \u0432 Apache Avro Java SDK, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e \u0434\u043e 1.11.4 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e. \n\n\ud83d\udd04 \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Apache Avro \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0435\u0440\u0441\u0438\u0439 1.11.4 \u0438 1.12.0 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0438\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0438 \u0440\u0430\u0437\u0431\u043e\u0440 \u0441\u0445\u0435\u043c \u043e\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \n\n\ud83d\udc68\u200d\ud83d\udcbb \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041a\u043e\u0441\u0442\u0435\u0439 \u041a\u043e\u0440\u0447\u0438\u043d\u0441\u043a\u0438\u0439 \u0438\u0437 Databricks \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \u041f\u043e\u043a\u0430 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 (PoC) \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043d\u0435\u0442, \u043e\u0434\u043d\u0430\u043a\u043e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u044b ReflectData \u0438 SpecificData, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0447\u0435\u0440\u0435\u0437 Kafka.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u043a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437\u0430 #\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 #ApacheAvro\n\n@ZerodayAlert", "creation_timestamp": "2026-07-12T00:00:40.019448Z"}]}