CVE-2017-3200

CVE-2017-3200 is a critical deserialization vulnerability affecting the Java AMF3 deserializers in GraniteDS version 3.1.1.G. This flaw allows a remote attacker to instantiate arbitrary classes and invoke setter methods, potentially leading to arbitrary code execution. With a CVSS score of 8.1 (HIGH), exploitation requires a high attack complexity but can result in complete compromise of confidentiality, integrity, and availability. While no public exploits or active exploitation have been observed, the vulnerability's nature and high impact warrant attention.