Description
A bypass in the component sofa-hessian of Solon before v2.3.3 allows attackers to execute arbitrary code via providing crafted payload.
Remediation
References
https://github.com/noear/solon/compare/v2.3.2...v2.3.3
https://github.com/noear/solon/issues/145
Related Vulnerabilities
CVE-2023-41886 Vulnerability in maven package org.openrefine:database
CVE-2016-5388 Vulnerability in maven package org.apache.tomcat:tomcat-catalina
CVE-2022-24999 Vulnerability in npm package qs
CVE-2019-18212 Vulnerability in maven package org.lsp4xml:org.eclipse.lsp4xml.extensions.emmet
CVE-2023-48967 Vulnerability in maven package org.noear:solon.serialization.fury