CVE-2025-32897

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-32897
Deserialization of Untrusted Data vulnerability in Apache Seata (incubating). This security vulnerability is the same as CVE-2024-47552, but the version range described in the CVE-2024-47552 definition is too narrow. This issue affects Apache Seata (incubating): from 2.0.0 before 2.3.0. Users are recommended to upgrade to version 2.3.0, which fixes the issue.
CVSS

No CVSS.

References
Link Resource
https://lists.apache.org/thread/9fhtf7yvpjpzlwd1m0wfgg6tp2btxpy1 Mailing List Vendor Advisory
https://www.cve.org/CVERecord?id=CVE-2024-47552 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:apache:seata:*:*:*:*:*:*:*:*
History

08 Jul 2025, 14:44

Type Values Removed Values Added
First Time Apache seata
Apache
References () https://lists.apache.org/thread/9fhtf7yvpjpzlwd1m0wfgg6tp2btxpy1 - () https://lists.apache.org/thread/9fhtf7yvpjpzlwd1m0wfgg6tp2btxpy1 - Mailing List, Vendor Advisory
References () https://www.cve.org/CVERecord?id=CVE-2024-47552 - () https://www.cve.org/CVERecord?id=CVE-2024-47552 - Third Party Advisory
CPE cpe:2.3:a:apache:seata:*:*:*:*:*:*:*:*

30 Jun 2025, 15:15

Type Values Removed Values Added
CWE CWE-502

28 Jun 2025, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-28 19:15

Updated : 2025-07-08 14:44

NVD link : CVE-2025-32897

Mitre link : CVE-2025-32897

JSON object : View

Products Affected

apache

  • seata
CWE

No CWE.