Description
A deserialization vulnerability in Jupiter v1.3.1 allows attackers to execute arbitrary commands via sending a crafted RPC request.
Remediation
References
https://github.com/fengjiachun/Jupiter
https://github.com/fengjiachun/Jupiter/issues/115
https://github.com/welk1n/JNDI-Injection-Exploit/releases/tag/v1.0
Related Vulnerabilities
CVE-2019-18212 Vulnerability in maven package org.lsp4xml:lsp4xml-extensions
CVE-2020-28502 Vulnerability in npm package xmlhttprequest
CVE-2021-28163 Vulnerability in maven package org.eclipse.jetty:jetty-deploy
CVE-2022-24613 Vulnerability in maven package com.drewnoakes:metadata-extractor
CVE-2023-29211 Vulnerability in maven package org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki