Description
A code injection in cryo 0.0.6 allows an attacker to arbitrarily execute code due to insecure implementation of deserialization.
Remediation
References
https://hackerone.com/reports/350418
Related Vulnerabilities
CVE-2023-5072 Vulnerability in maven package org.json:json
CVE-2022-0436 Vulnerability in maven package org.webjars.npm:grunt
CVE-2021-32012 Vulnerability in npm package xlsx
CVE-2021-46089 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-base-core
CVE-2023-30527 Vulnerability in maven package org.jenkins-ci.plugins:wso2id-oauth