Description
A bypass in the component sofa-hessian of Solon before v2.3.3 allows attackers to execute arbitrary code via providing crafted payload.
Remediation
References
https://github.com/noear/solon/compare/v2.3.2...v2.3.3
https://github.com/noear/solon/issues/145
Related Vulnerabilities
CVE-2022-35961 Vulnerability in maven package org.webjars.npm:openzeppelin__contracts-upgradeable
CVE-2021-23370 Vulnerability in npm package swiper
CVE-2020-6463 Vulnerability in npm package electron
CVE-2020-28246 Vulnerability in npm package formio
CVE-2023-47324 Vulnerability in maven package org.silverpeas.core:silverpeas-core-api