Solon is vulnerable to Deserialization of Untrusted Data

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-48967 · ADVISORY
• noear/solon · WEB
• noear/solon · PACKAGE

org.noear:solon のその他の脆弱性

• CVE-2023-35839緊急 9.8A bypass in the component sofa-hessian of Solon before v2.3.3 allows attackers to execute arbitrary code via providing crafted payload.