Security Advisory
CVE-2018-6331
9.8
CRITICAL
Vulnerability Description
Buck parser-cache command loads/saves state using Java serialized object. If the state information is maliciously crafted, deserializing it could lead to code execution. This issue affects Buck versions prior to v2018.06.25.01.
Published Date
December 31, 2018
Official Source
NIST NVD Advisory